SB2021122102 - Multiple vulnerabilities in SonicWall SMA 100

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Observable Response Discrepancy (CVE-ID: CVE-2021-20049)

The vulnerability allows a remote attacker to enumerate user logins.

The vulnerability exists in the SonicWall SMA100 password change API due to different responses sent for exiting and non-existing users. A remote attacker can enumerate usernames.

2) Improper access control (CVE-ID: CVE-2021-20050)

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions to multiple management APIs. A remote non-authenticated attacker can obtain configuration meta-data.

Remediation

Install update from vendor's website.

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0030
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031