A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: sonicwall
Published: 2021-12-08T09:55:20
Updated: 2024-08-03T17:30:07.356Z
Reserved: 2020-12-17T00:00:00
Link: CVE-2021-20038
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-12-08T10:15:07.750
Modified: 2024-11-21T05:45:49.880
Link: CVE-2021-20038
Redhat
No data.