{
    "id": "CVE-2021-20042",
    "published": "2021-12-08 10:15:08",
    "last_modified": "2026-06-17 03:33:11",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-441",
    "description": "An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.",
    "epss_score": "0.03682",
    "epss_percentile": "0.89396",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-09 18:17:27",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "sonicwall",
            "product": "sma_200"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_200_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_210"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_210_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_400"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_400_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_410"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_410_firmware"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_500v"
        },
        {
            "vendor": "sonicwall",
            "product": "sma_500v_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026",
        "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026"
    ]
}