← ExploitWatch
HomeExploited Vulnerabilities

CVE-2021-20035 — Actively Exploited: SMA100 Appliances (SonicWall)

SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.

CVE IDCVE-2021-20035
VendorSonicWall
ProductSMA100 Appliances
Vulnerability nameSonicWall SMA100 Appliances OS Command Injection Vulnerability
Date added2025-04-16
Remediation due2025-05-07
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
DescriptionSonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →