CVE:CVE-2021-20042
CNNVD:CNNVD-202112-553
Sonicwall SMA100是美国Sonicwall公司的一款安全访问网关设备。
SonicWall SMA100 存在安全漏洞，未经身份验证的远程攻击者可以使用 SMA100 作为意外代理或中间无法检测的代理来绕过防火墙规则。此漏洞影响了 SMA 200、210、400、410 和 500v 设备。
solution:Upgrade sonicwall sma_200_firmware to a higher version than 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_210_firmware to a higher version than 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_410_firmware to a higher version than 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_400_firmware to a higher version than 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_500v_firmware to a higher version than 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 9.0.0.11-31sv,10.2.0.8-37sv,10.2.1.1-19sv