CVSS 3.1 Score 9.8 of 10 (high)


Published Dec 8, 2021
Updated: May 13, 2022
CWE ID 787


CVE-2021-20038 is a stack-based buffer overflow vulnerability that affects the SMA100 Apache httpd server's mod_cgi module environment variables. This vulnerability allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the affected appliances. The impacted products include SMA 200, 210, 400, 410, and 500v appliances with firmware versions,,, and earlier versions. To remediate this vulnerability, users should update their firmware to the latest version provided by SonicWall. The potential danger posed by this vulnerability is significant, as it could allow attackers to gain unauthorized access and potentially take control of the affected systems, leading to data breaches or other malicious activities within an organization's network infrastructure.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2021-20038 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options