{"id":111,"created_when":"2021-01-23T10:36:41Z","created_by":"arun","updated_when":"2021-02-03T21:11:44Z","updated_by":"arun","advisory_id":"SNWLID-2021-0001","title":"Confirmed Zero-day vulnerability in the SonicWall SMA100 build version 10.x","published_when":"2021-01-23T10:36:41Z","last_updated_when":"2021-02-03T21:11:44Z","impact":"critical","cvss":"9.8","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_version":3.0,"cwe":"CWE-89","cve":"CVE-2021-20016","cpe":"","summary":"A vulnerability resulting in improper SQL command neutralization in the SonicWall SSLVPN SMA100 product allows remote exploitation for credential access by an unauthenticated attacker. This vulnerability impacts SMA100 build version 10.x.","is_workaround_available":true,"workaround":"<p>1)&nbsp;Enable multifactor authentication (MFA) as a safety measure.<br></p>\r\n\t<p>&nbsp; - MFA has an invaluable safeguard against credential theft and is a key measure of good security posture.</p>\r\n\t<p>&nbsp; -&nbsp;MFA is effective whether it is enabled on the appliance directly or on the directory service in your organization.</p>\r\n\t\t<p>2) Enable WAF on SMA100.</p>\r\n\t\t\t<p>3)&nbsp;Reset the passwords for any users who may have logged into the device via the web interface.</p>","detail":"","affected_products":"<p>Affected SMA 100 devices with 10.x firmware that requires the critical patch<br></p><ul><li>Physical Appliances: SMA 200, SMA 210, SMA 400, SMA 410</li><li>Virtual Appliances: SMA 500v (Azure, AWS, ESXi, HyperV)<br></li></ul>","fixed_software":"10.2.0.5-d-29sv","credits":"<div>Richard Warren and Ollie Whitehouse - NCC Group</div><div>Kings Court, Kingston Road, Leatherhead, KT22 7SL</div><div>Website: www.nccgroup.com</div><div>Twitter: @NCCGroupplc</div>","revision_history":"<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Version</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>1.0</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Date</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>23-Jan-2021</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Description</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>Initial Release.</p>\r\n\t</li>\r\n<p>----------------------------------------------------------------------------------</p>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Version</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>1.1</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Date</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>24-Jan-2021</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Description</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>Updated Affected product(s) and Workaround section.</p>\r\n\t</li>\r\n<p>----------------------------------------------------------------------------------</p>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Version</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>1.2</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Date</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>01-Feb-2021</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Description</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>Confirmed Zero-day vulnerability in the SMA100 build version 10.x.</p>\r\n\t</li>\r\n\r\n<p>----------------------------------------------------------------------------------</p>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Version</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>1.3</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Date</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>03-Feb-2021</p>\r\n\t</li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n\t<li class=\"summary-detail-label\">Description</li>\r\n\t<li class=\"summary-detail-item\">\r\n\t\t<p>Availability of patch build SMA 100 series firmware 10.2.0.5-29sv</p>\r\n\t</li>\r\n</ul>","references":"https://www.sonicwall.com/support/product-notification/urgent-security-notice-sonicwall-confirms-sma-100-series-10-x-zero-day-vulnerability-feb-3-2-p-m-cst/210122173415410/","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"id":4,"name":"Secure Mobile Access (SMA) 100 Series"}]}