Security News > 2022 > January > Critical SonicWall NAC Vulnerability Stems from Apache Mods

Rapid7 has offered up more details on a SonicWall critical flaw that allows for unauthenticated remote code execution on affected devices, noting that it arises from tweaks that the vendor made to the Apache httpd server.

CVE-2021-20038 is the most critical of the flaws, with a rating of 9.8 on the Common Vulnerability Scoring System.

It's a stack buffer overflow vulnerability that an attacker can exploit to gain complete control of a device or virtual machine that's running SonicWall's NAC solution.

The stack-based buffer overflow flaw discovered by Baines affects SonicWall SMA 100 series version: 10.2.1.1-19sv and is by far is the most dangerous for affected devices, and thus the most advantageous for attackers, he wrote.

Since edge-based NAC devices "Are especially attractive targets for attackers," Baines said it's essential that companies with networks that use SonicWall's SMA 100 series devices in whatever form apply SonicWall's update as quickly as possible to fix the issues, Baines said.

They include an "Improper neutralization of special elements used in an OS command," or OS command injection flaw with a rating of 7.2; a relative path traversal vulnerability with a rating of 6.5; a loop with unreachable exit condition, or infinite loop flaw with a rating of 7.5; and an unintended proxy or intermediary also known as a "Confused deputy" vulnerability with a rating of 6.5.

News URL

https://threatpost.com/sonicwall-nac-vulnerability-apache-mods/177529/