SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

Description

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

Required Action

The impacted product is end-of-life and should be disconnected if still in use.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-20028

Additional Information

Catalog Version

2025.01.24

Catalog Released

Jan. 24, 2025

Days Until Due

0 days

Last Updated

6 months, 4 weeks ago