Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware CVE-2021-20038

githubexploit · 2022-08-08

Description

Stack-based Buffer Overflow in Sonicwall Sma 200 Firmware CVE-2021-2003

Affected Sonicwall Sma 200 Firmware versions

Sonicwall Sma 200 Firmware= 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv

All known vulnerabilities by product

Apache Http Server Sonicwall Sma100 Appliance Sonicwall Sma200 Sonicwall Sma210 Sonicwall Sma400 Sonicwall Sma410 Sonicwall Sma500V

CVSS 9.8 for CVE-2021-20038

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

79%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-07-25

Exploit Details

Modified:2022-08-08 04:56

Last Seen:2025-08-31 21:24

Reporter:vesperp

Tags

sonicwallbuffer overflowCVE-2021-20038stack-basedfirmwareexploitcommand injectionremote code execution

Other exploits for CVE-2021-20038

Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

2022-08-08 vesperpGITHUB

SonicWall SMA 100 Series Authenticated Command Injection

2022-01-17 jbaines-r7METASPLOITRuby

SonicWall SMA 100 Series Authenticated Command Injection

2022-01-13 jbaines-r7, metasploit.comPACKETSTORMRuby

SonicWall SMA 100 Series Authenticated Command Injection Exploit

2022-01-13 metasploitZDTRuby

Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

2022-01-11 jbaines-r7GITHUB

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=77916E79-E02E-5614-8FE7-E108D8A8A7E5
# SonicWallSSL-VPN_RCE  
CVE-2021-20038  

**Command line parameters:**  
-h: View help.  
-u: Specify the URL.  
-f: Specify the file.  

**The format within the file parameter should include the http/https header.**