PULSE
ESEN
FEED
ransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.com
← Todos os CVEs
CVE Watch—

CVE-2021-20028

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

30.1%

p98

KEV

SIM

28 de mar. de 2022

Exploit Today

79

0-100

Publicado: — · Última mod.: —

EPSS · 30d
30.1%EPSS · 30 dias30.1%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

SonicWall / Secure Remote Access (SRA)

Vulnerabilidade

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

Adicionado ao KEV

28 de mar. de 2022

Corrigir até

18 de abr. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

Ação necessária

The impacted product is end-of-life and should be disconnected if still in use.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-20028

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.