CVE-2021-20016
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
CVSS
—
No CVSS
EPSS
40.0%
p98
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
40.0%EPSS · 30 days40.0%
2026-06-302026-07-16
Product
SonicWall / SSLVPN SMA100
Vulnerability
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
Nov 17, 2021
Known ransomware use
Yes
Summary description
SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-20016
No related CVEs by CWE or product.