https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035 SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution. Added to CISA KEV on 2025-04-16. en Wed, 16 Apr 2025 00:00:00 GMT https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035 https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035#2025-04-16-ee506d7f Wed, 16 Apr 2025 00:00:00 GMT medium <p>SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability: CISA added CVE-2021-20035 to the KEV catalog (due 2025-05-07).</p>