Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

githubexploit · 2022-08-08

Description

Stack-based Buffer Overflow in Sonicwall Sma 200 Firmwar

Affected Sonicwall Sma 200 Firmware versions

Sonicwall Sma 200 Firmware= 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv

All known vulnerabilities by product

Apache Http Server Sonicwall Sma100 Appliance Sonicwall Sma200 Sonicwall Sma210 Sonicwall Sma400 Sonicwall Sma410 Sonicwall Sma500V

CVSS 9.8 for CVE-2021-20038

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

79%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-07-25

Exploit Details

Modified:2022-08-08 04:56

Last Seen:2025-08-31 21:24

Reporter:vesperp

Written in:Python

Last commit:2022-08-08

Tags

exploitbuffer overflowsonicwall sma 200vulnerabilityremote code executionCVE-2021-20038command-line parametersurlfile format

Other exploits for CVE-2021-20038

Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

2022-08-08 vesperpGITHUB

SonicWall SMA 100 Series Authenticated Command Injection

2022-01-17 jbaines-r7METASPLOITRuby

SonicWall SMA 100 Series Authenticated Command Injection

2022-01-13 jbaines-r7, metasploit.comPACKETSTORMRuby

SonicWall SMA 100 Series Authenticated Command Injection Exploit

2022-01-13 metasploitZDTRuby

Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware

2022-01-11 jbaines-r7GITHUB

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=D20389A4-F885-5B7E-B438-63820C721AD3
# SonicWallSSL-VPN_RCE  
CVE-2021-20038  

**Command line parameters:**  
-h: View help.  
-u: Specify the URL.  
-f: Specify the file.  

**The format within the file parameter should include the http/https header.**