All CVE records

CVE-2021-20028 — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

Known ransomware use CISA KEV listed Added March 28, 2022 Remediate by April 18, 2022

Description

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-20028

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer