Vulnerability Details CVE-2021-20049
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2021-20049
-
cpe:2.3:h:sonicwall:sma100:-
-
cpe:2.3:h:sonicwall:sma200:-
-
cpe:2.3:h:sonicwall:sma210:-
-
cpe:2.3:h:sonicwall:sma400:-
-
cpe:2.3:h:sonicwall:sma410:-
-
cpe:2.3:h:sonicwall:sma500v:-
-
cpe:2.3:o:sonicwall:sma_100_firmware:-
-
cpe:2.3:o:sonicwall:sma_100_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_100_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_100_firmware:9.0.0.0
-
cpe:2.3:o:sonicwall:sma_100_firmware:9.0.0.3
-
cpe:2.3:o:sonicwall:sma_100_firmware:9.0.0.4
-
cpe:2.3:o:sonicwall:sma_200_firmware:-
-
cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.10-28sv
-
cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv
-
cpe:2.3:o:sonicwall:sma_210_firmware:-
-
cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_210_firmware:8.0.0.0
-
cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.10
-
cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.10-28sv
-
cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv
-
cpe:2.3:o:sonicwall:sma_400_firmware:-
-
cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.10-28sv
-
cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv
-
cpe:2.3:o:sonicwall:sma_410_firmware:-
-
cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_410_firmware:8.0.0.0
-
cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.10
-
cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.10-28sv
-
cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv
-
cpe:2.3:o:sonicwall:sma_500v_firmware:-
-
cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv
-
cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.2-24sv
-
cpe:2.3:o:sonicwall:sma_500v_firmware:8.0.0.0
-
cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.10
-
cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.10-28sv
-
cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv
-
cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.9-26sv