ZeroDay Findings
Sign inSign up

Findings

CVE-2021-20038

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

Published Dec 8, 2021 · updated Jun 16, 2026 · sonicwall sma 200 firmware

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 8, 2021 · Catalog

    Detected

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

  2. Jan 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Feb 11, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

Required action

Apply updates per vendor instructions.

CISA due date Feb 11, 2022

Affected

  • cpe sonicwall/sma 200 firmware10.2.0.8-37sv
  • cpe sonicwall/sma 200 firmware10.2.1.1-19sv
  • cpe sonicwall/sma 200 firmware10.2.1.2-24sv
  • cpe sonicwall/sma 210 firmware10.2.0.8-37sv
  • cpe sonicwall/sma 210 firmware10.2.1.1-19sv
  • cpe sonicwall/sma 210 firmware10.2.1.2-24sv
  • cpe sonicwall/sma 400 firmware10.2.0.8-37sv
  • cpe sonicwall/sma 410 firmware10.2.0.8-37sv
  • cpe sonicwall/sma 410 firmware10.2.1.1-19sv
  • cpe sonicwall/sma 500v firmware10.2.0.8-37sv
  • vendor SonicWall SMA 100 Appliancesversion unspecified

Sources

  • CISA KEVCVE-2021-20038

    SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.

    cisa.gov
  • CVE.orgCVE-2021-20038

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-20038

    30-day exploitation probability 99.9%

    first.org
  • Metasploit Modulesexploit_linux/http/sonicwall_cve_2021_20039

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2021-20038

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v a

    nvd.nist.gov

References