SonicWall SMA 500v vulnerabilities

3 CVEs affecting SonicWall SMA 500v, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20035, published 2021-09-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability, published 2021-02-04. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 40% chance of exploitation in the next 30 days. A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information.…
CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability, published 2021-09-27. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-04-16. EPSS: 4.2% chance of exploitation in the next 30 days. Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
CVE-2021-20034, published 2021-09-27. Critical severity, CVSS 9.1. EPSS: 81% chance of exploitation in the next 30 days. An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to…