CVE-2021-20038

Summary

CVE-2021-20038 is a stack-based buffer overflow vulnerability affecting the mod_cgi module of SMA100 Apache httpd servers. Unauthenticated attackers can exploit this issue, present in SMA 200, 210, 400, 410, and 500v appliances running firmware versions 10.2.0.8-37sv, 10.2.1.1-19sv, and 10.2.1.2-24sv and earlier, to potentially execute code as the 'nobody' user. This vulnerability, if exploited, could result in significant security implications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.