High severity7.2NVD Advisory· Published Jan 9, 2021· Updated Jun 17, 2026

CVE-2020-5146

Description

A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.

Affected products

SonicWall/SMA100 appliancellm-create
Range: <=10.2.0.2-20sv
SonicWall/SMA100cpe-rescue
Range: 10.2.0.2-20sv and earlier

Patches

Vulnerability mechanics

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0022nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000