| ID | CVE-2021-20039 | ||||||
| Sažetak | Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:L/Au:S/C:C/I:C/A:C | ||||||
| Zadnje važnije ažuriranje | 05-09-2025 - 18:15 | ||||||
| Objavljeno | 08-12-2021 - 10:15 |
