SonicWall Security Flaw: A Comedy of Errors in Code Execution!
CISA adds a security flaw in SonicWall SMA 100 Series to its Known Exploited Vulnerabilities catalog. The vulnerability, CVE-2021-20035, allows remote attackers to inject commands, potentially leading to code execution. Federal agencies have until May 2025 to apply fixes and protect against this high-severity risk.
Hot Take:
Looks like SonicWall’s SMA 100 Series gateways took the “remote work” concept a bit too seriously, allowing remote code execution as a ‘nobody’. Now, thanks to CISA, they’re getting a crash course in cybersecurity etiquette.
Key Points:
- High-severity flaw in SonicWall SMA 100 Series gateways added to CISA’s KEV catalog.
- Vulnerability CVE-2021-20035 allows OS command injection, leading to potential code execution.
- Impacts multiple SMA models and software versions; patches are already available.
- Exploitation details are few, but SonicWall confirms active attempts in the wild.
- FCEB agencies have until May 7, 2025, to patch up or face the cyber consequences.
Already a member? Log in here