threat/intelligence

CVE lookup

CVE-2021-20028

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

No dossier yet. This CVE is on our watch list.

Dossiers are written only when the selection criteria are met. Until then, use the primary sources below.

Description

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Primary sources

  1. NVD - CVE-2021-20028
  2. CISA KEV catalog entry
  3. FIRST EPSS