CVE‑2021‑20016: SonicWall SSLVPN SMA100 SQL Injection Allows Unauthenticated Credential Access
What It Is — The SMA100 appliance’s web‑admin interface contains an unauthenticated SQL injection flaw that can be leveraged to read the device’s credential store.
Exploitability — Publicly disclosed; proof‑of‑concept code exists; CVSS v3.1 base score 9.8 (Critical).
Affected Products — SonicWall SSLVPN SMA100 (all firmware versions prior to the vendor‑issued patch).
Why It Matters for Trust & Control Assurance
- Access‑control hygiene – The bug bypasses authentication, directly violating the control objective of protecting privileged credentials.
- Continuous evidence – Detecting exploitation requires log‑monitoring and audit trails that demonstrate you are actively verifying access‑control enforcement.
- Defensible audit posture – Regulators and enterprise buyers increasingly demand proof that remote‑access solutions are patched and that credential‑access controls are continuously validated.
Recommended Actions
- Apply SonicWall’s patch immediately and verify the firmware version.
- Review and harden SSLVPN configuration – disable unnecessary services, enforce strong MFA for VPN users.
- Enable detailed query logging on the appliance and forward logs to a SIEM for real‑time anomaly detection.
- Run a targeted vulnerability scan of all SSLVPN endpoints to confirm remediation.
- Update access‑control policies to require multi‑factor authentication for any remote‑admin access.
Source: CISA KEV – CVE‑2021‑20016