#VU49936 SQL injection in SonicWall products - CVE-2021-20016

Description

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote non-authenticated attacker can send a specially crafted HTTP request to the SSL-VPN appliance and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to access usernames, passwords and other session related information.

Note, the vulnerability is being actively exploited in the wild.

Remediation

Install update from vendor's website.

The following products are affected:

Physical appliances – SMA 200, SMA 210, SMA 400 and SMA 410.

Virtual appliance – SMA 500v.

External links

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001
• https://www.sonicwall.com/support/product-notification/urgent-patch-available-for-sma-100-series-10-x-firmware-zero-day-vulnerability-updated-feb-3-2-p-m-cst/210122173415410/