CVE-2021-20042 Server-side request forgery in SonicWall SMA100
Unauthenticated attackers can use SonicWall SMA100 appliances as an unintended proxy to bypass firewall rules and access internal resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20042?
CVE-2021-20042 is a critical server-side request forgery vulnerability in SonicWall SMA100, published on 8 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Weakness: CWE-441
Which versions are affected by CVE-2021-20042?
It affects 5 products.
Products include Sonicwall Sma 200 Firmware, Sonicwall Sma 210 Firmware, Sonicwall Sma 400 Firmware, Sonicwall Sma 410 Firmware, Sonicwall Sma 500v Firmware.
How do I fix CVE-2021-20042?
No fix has been published for CVE-2021-20042 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2021-20042 being exploited?
There is no known exploitation of CVE-2021-20042 in the wild and no public exploit code.
Other vulnerabilities in SonicWall SMA100
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection
- CVE-2022-22273 Command injection in SonicWall SRA/SMA100
- CVE-2021-20045 Memory corruption in SonicWall SMA100
Sources
Also known as GHSA-7jhp-ff4f-8fx7.