Vulnerabilities > Sonicwall > SMA 400 Firmware > 9.0.0.11.31sv

DATE CVE VULNERABILITY TITLE RISK
2021-12-08 CVE-2021-20041 Infinite Loop vulnerability in Sonicwall products
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition.
network
low complexity
sonicwall CWE-835
7.5
2021-12-08 CVE-2021-20042 Unspecified vulnerability in Sonicwall products
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.
network
low complexity
sonicwall
critical
9.8