{"id":132,"created_when":"2021-09-23T21:29:13Z","created_by":"arun","updated_when":"2021-09-23T21:29:13Z","updated_by":"arun","advisory_id":"SNWLID-2021-0022","title":"Authenticated SMA100 Arbitrary Command Injection Vulnerability","published_when":"2021-09-23T21:29:13Z","last_updated_when":"2025-04-15T15:50:44Z","impact":"high","cvss":"7.2","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_version":3.0,"cwe":"CWE-78","cve":"CVE-2021-20035","cpe":"","summary":"Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.","is_workaround_available":false,"workaround":"None.","detail":"This vulnerability is potentially being exploited in the wild.","affected_products":"

9.0.0.10-28sv and earlier

10.2.0.7-34sv and earlier

10.2.1.0-17sv and earlier

","fixed_software":"\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
\r\n

Product

\r\n 		\r\n

Platform

\r\n 		\r\n

Impacted Version

\r\n 		\r\n

Fixed Version

\r\n
\r\n

SMA 100 Series

\r\n 		\r\n

• SMA 200
\r\n • SMA 210
\r\n • SMA 400
\r\n • SMA 410
\r\n • SMA 500v (ESX, KVM, AWS, Azure)

\r\n 		\r\n

10.2.1.0-17sv and earlier

\r\n 		\r\n

10.2.1.1-19sv and higher

\r\n
\r\n

10.2.0.7-34sv and earlier

\r\n 		\r\n

10.2.0.8-37sv and higher

\r\n
\r\n

9.0.0.10-28sv and earlier

\r\n 		\r\n

9.0.0.11-31sv and higher

\r\n
","credits":"Wenxu Yin - Alpha Lab, Qihoo 360 Technology Co. Ltd.","revision_history":"\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","references":"","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"name":"Secure Mobile Access (SMA) 100 Series","id":4}]}