CVE-2021-20040
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 26%
exploitation probability
26%top 2% of all CVEs
observed exploitation
nono source reports it
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Affected products
SonicWall · SonicWall SMA100