CVE-2021-20028

KEV · Ransomware

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

View CVE record →

Vendor / Project: SonicWall
Product: Secure Remote Access (SRA)
Date added: Mar 28, 2022
Due date: Apr 18, 2022
Known ransomware use: Known
CWEs: CWE-89

Description

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-20028