Critical severity9.8CISA KEVNVD Advisory· Published Aug 4, 2021· Updated Jun 17, 2026
CVE-2021-20028
CVE-2021-20028
Description
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
Affected products
8- cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- cpe:2.3:o:sonicwall:sra_1600_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- cpe:2.3:o:sonicwall:sra_4600_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- cpe:2.3:o:sonicwall:sra_va_firmware:*:*:*:*:*:*:*:*Range: >=8.0.0.0,<9.0.0.10-28sv
- Range: <=9.0.0.9-26sv or earlier, and all 8.x firmware
- SonicWall/SonicWall SRA/SMA100v5Range: 8.x firmware
Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.