What the vulnerability does

01Description

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Key dates

02Disclosure timeline

December 8, 2021 CVE published
August 3, 2024 Record updated