All CVE records
CVE-2021-20016 — SonicWall SSLVPN SMA100 SQL Injection Vulnerability
Known ransomware use
CISA KEV listed
Added November 3, 2021 Remediate by November 17, 2021
Description
SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.