PT-2022-9165 · Sonicwall · Sonicwall Gms

Published 2022-10-13 · Updated 2025-05-16 · CVE-2021-20030

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SonicWall GMS (affected versions not specified)

Description The issue allows an unauthenticated attacker to gain access to the web directory containing the application's binaries and configuration files through file path manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-20030

Affected Products

Sonicwall Gms

References · 5

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20030 · Security Note
• https://osv.dev/vulnerability/CVE-2021-20030 · Vendor Advisory
• https://t.me/cibsecurity/51312 · Telegram Post
• https://t.me/cvenotify/122544 · Telegram Post