2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2021-20041" ,
"sourceIdentifier" : "PSIRT@sonicwall.com" ,
"published" : "2021-12-08T10:15:08.003" ,
"lastModified" : "2021-12-10T21:59:54.930" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."
} ,
{
"lang" : "es" ,
"value" : "Un adversario no autenticado y remoto puede consumir toda la CPU del dispositivo debido a peticiones HTTP dise\u00f1adas enviadas a SMA100 /fileshare/sonicfiles/sonicfiles, lo que provoca un bucle con condici\u00f3n de salida inalcanzable. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "COMPLETE" ,
"baseScore" : 7.8
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-835"
}
]
} ,
{
"source" : "PSIRT@sonicwall.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-835"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4D9E19F4-7FF4-426C-8B08-BCC802F653E0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4185C028-6A07-4A92-8380-9AA3953D2CFD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "33233A45-6667-4CE9-A21C-6A6C725689F8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0B190266-AD6F-401B-9B2E-061CDD539236"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C14BCE5E-887B-41D4-9845-34E3A7CCDE58"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E62EEC93-6F52-4DDB-95F0-D5736391D64C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E4F1C135-A182-4233-B7FC-D08C754ECE13"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "51587338-4A5F-41FC-9497-743F061947C2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9464A061-4218-472A-B981-8E6A653C5D53"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8EC74D70-C04B-481F-A706-6C86751996FB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C842AFF6-C556-4187-957B-548E5649D949"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9BE21589-3BEC-4245-9939-CF50DE70B12A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BEB82F42-A5DF-42CC-86F9-B06B39BBC202"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D728332-10C9-4508-B720-569D44E99543"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0E00827E-3007-4EA4-B22A-3BDFC246EA65"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "379F7CA2-8914-4710-AE6B-D2833605D4B8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC429F62-366B-4B68-B378-FB741F9F7FEF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026" ,
"source" : "PSIRT@sonicwall.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
