[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHKn1AWoRAUSMpMk4Jk58V-57qVIftAn4GrOF4V-97Dk":3,"g5a-risk:CVE-2021-20038":252},{"success":4,"data":5,"meta":250},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":105,"references":106,"referencesCount":133,"weaknesses":134,"weaknessesCount":147,"isActivelyExploited":4,"cisaInfo":148,"otxData":27,"relatedBlogPosts":149,"seoMetadata":150,"configurations":175,"relatedVendorCves":248,"notableEvents":249},"CVE-2021-20038","What is CVE-2021-20038?","A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.","A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to ...","2021-12-08T10:15:07.75","2025-10-31T17:13:16.787",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.99912,[46,46,46,46,46,46,46],"Critical",[50,55,58,61,65,68,70,72,75,78,80,82,85,88,90,92,95,98,100,102],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"sonicwall","sma_200_firmware","10.2.0.8-37sv","cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"10.2.1.1-19sv","cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"10.2.1.2-24sv","cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":63,"criteria":64,"vulnerable":45},"sma_200","-","cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*",{"vendor":51,"product":66,"version":53,"criteria":67,"vulnerable":4},"sma_210_firmware","cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*",{"vendor":51,"product":66,"version":56,"criteria":69,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*",{"vendor":51,"product":66,"version":59,"criteria":71,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*",{"vendor":51,"product":73,"version":63,"criteria":74,"vulnerable":45},"sma_210","cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",{"vendor":51,"product":76,"version":53,"criteria":77,"vulnerable":4},"sma_410_firmware","cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*",{"vendor":51,"product":76,"version":56,"criteria":79,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*",{"vendor":51,"product":76,"version":59,"criteria":81,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*",{"vendor":51,"product":83,"version":63,"criteria":84,"vulnerable":45},"sma_410","cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",{"vendor":51,"product":86,"version":53,"criteria":87,"vulnerable":4},"sma_400_firmware","cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*",{"vendor":51,"product":86,"version":56,"criteria":89,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*",{"vendor":51,"product":86,"version":59,"criteria":91,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*",{"vendor":51,"product":93,"version":63,"criteria":94,"vulnerable":45},"sma_400","cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*",{"vendor":51,"product":96,"version":53,"criteria":97,"vulnerable":4},"sma_500v_firmware","cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*",{"vendor":51,"product":96,"version":56,"criteria":99,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*",{"vendor":51,"product":96,"version":59,"criteria":101,"vulnerable":4},"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*",{"vendor":51,"product":103,"version":63,"criteria":104,"vulnerable":45},"sma_500v","cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",20,[107,113,118,122,124,126,128],{"url":108,"source":109,"tags":110},"https:\u002F\u002Fgithub.com\u002Fjbaines-r7\u002Fbadblood","GitHub",[111,112],"Exploit","Third Party Advisory",{"url":114,"source":115,"tags":116},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2021-0026","Sonicwall",[117],"Vendor Advisory",{"url":119,"source":120,"tags":121},"https:\u002F\u002Fwww.rapid7.com\u002Fblog\u002Fpost\u002F2022\u002F01\u002F11\u002Fcve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2\u002F","Rapid7",[111,112],{"url":108,"source":109,"tags":123},[111,112],{"url":114,"source":115,"tags":125},[117],{"url":119,"source":120,"tags":127},[111,112],{"url":129,"source":130,"tags":131},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20038","CISA",[132],"US Government Resource",7,[135,142],{"id":136,"name":137,"description":138,"extendedDescription":42,"status":139,"abstraction":140,"structure":141},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","Draft","Variant","Simple",{"id":143,"name":144,"description":145,"extendedDescription":42,"status":139,"abstraction":146,"structure":141},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":151,"metaDescription":152,"keywords":153,"canonicalUrl":154,"structuredData":155},"What is CVE-2021-20038? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-20038, a critical severity cyber security vulnerability from 2021. High exploit probability (99.9%). A Stack-based buffer ...","CVE-2021-20038, CVE-2021-20038 vulnerability, CVE-2021-20038 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, sonicwall security, sma_200_firmware vulnerability, sma_200 vulnerability, sma_210_firmware vulnerability, sma_210 vulnerability, sma_410_firmware vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2021-20038",{"@context":156,"@type":157,"headline":151,"description":152,"datePublished":10,"dateModified":11,"author":158,"publisher":162,"about":166,"mainEntityOfPage":170,"articleSection":173,"keywords":174},"https:\u002F\u002Fschema.org","TechArticle",{"@type":159,"name":160,"url":161},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":159,"name":160,"url":161,"logo":163},{"@type":164,"url":165},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":167,"name":6,"description":168,"additionalType":169},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":171,"@id":172},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-20038","Cybersecurity","CVE-2021-20038, CVE-2021-20038 vulnerability, CVE-2021-20038 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[176,192,206,220,234],{"Operator":177,"Negate":27,"Nodes":178},"AND",[179,188],{"Operator":180,"Negate":45,"CPEMatch":181},"OR",[182,184,186],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4185C028-6A07-4A92-8380-9AA3953D2CFD",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"33233A45-6667-4CE9-A21C-6A6C725689F8",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"01134E66-F1FD-477B-AD44-FDEE8368BE18",{"Operator":180,"Negate":45,"CPEMatch":189},[190],{"Vulnerable":45,"Criteria":64,"MatchCriteriaID":191,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0B190266-AD6F-401B-9B2E-061CDD539236",{"Operator":177,"Negate":27,"Nodes":193},[194,202],{"Operator":180,"Negate":45,"CPEMatch":195},[196,198,200],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":197,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E62EEC93-6F52-4DDB-95F0-D5736391D64C",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":199,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E4F1C135-A182-4233-B7FC-D08C754ECE13",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":201,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B38AAB98-7668-4F34-8D5F-9933422F12DD",{"Operator":180,"Negate":45,"CPEMatch":203},[204],{"Vulnerable":45,"Criteria":74,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51587338-4A5F-41FC-9497-743F061947C2",{"Operator":177,"Negate":27,"Nodes":207},[208,216],{"Operator":180,"Negate":45,"CPEMatch":209},[210,212,214],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":211,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":213,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8EC74D70-C04B-481F-A706-6C86751996FB",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":215,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9F1FA3D8-C44A-4F33-B35D-AADF8C4E45DF",{"Operator":180,"Negate":45,"CPEMatch":217},[218],{"Vulnerable":45,"Criteria":84,"MatchCriteriaID":219,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E",{"Operator":177,"Negate":27,"Nodes":221},[222,230],{"Operator":180,"Negate":45,"CPEMatch":223},[224,226,228],{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":225,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9BE21589-3BEC-4245-9939-CF50DE70B12A",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":227,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BEB82F42-A5DF-42CC-86F9-B06B39BBC202",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":229,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54946A90-09AC-4387-BACB-883AE70FD5A7",{"Operator":180,"Negate":45,"CPEMatch":231},[232],{"Vulnerable":45,"Criteria":94,"MatchCriteriaID":233,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9D728332-10C9-4508-B720-569D44E99543",{"Operator":177,"Negate":27,"Nodes":235},[236,244],{"Operator":180,"Negate":45,"CPEMatch":237},[238,240,242],{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":239,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"379F7CA2-8914-4710-AE6B-D2833605D4B8",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":241,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AC429F62-366B-4B68-B378-FB741F9F7FEF",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":243,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9395563D-9071-4CE2-BAEA-D6854F4AD961",{"Operator":180,"Negate":45,"CPEMatch":245},[246],{"Vulnerable":45,"Criteria":104,"MatchCriteriaID":247,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770",[],[],{"lastModified":11,"cacheTime":251,"version":38},1792240676655,{"score":253,"band":48,"action":254,"scoredAt":255},88,"Emergency patch","2026-10-16T06:52:38.461653+00:00"]