CVE-2021-20041 Denial of service in SonicWall SMA100
Unauthenticated remote attackers can cause denial of service on SonicWall SMA100 appliances by sending crafted HTTP requests that trigger an infinite loop.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20041?
CVE-2021-20041 is a high-severity denial of service vulnerability in SonicWall SMA100, published on 8 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Weakness: CWE-835
Which versions are affected by CVE-2021-20041?
It affects 5 products.
Products include Sonicwall Sma 200 Firmware, Sonicwall Sma 210 Firmware, Sonicwall Sma 400 Firmware, Sonicwall Sma 410 Firmware, Sonicwall Sma 500v Firmware.
How do I fix CVE-2021-20041?
No fix has been published for CVE-2021-20041 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-20041 being exploited?
There is no known exploitation of CVE-2021-20041 in the wild and no public exploit code.
Other vulnerabilities in SonicWall SMA100
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection
- CVE-2022-22273 Command injection in SonicWall SRA/SMA100
- CVE-2021-20042 Server-side request forgery in SonicWall SMA100
Sources
Also known as GHSA-qhp6-xj37-53m2.