March 28, 2022 · Applied Cybernetics Group
CVE-2021-20028 — SonicWall Secure Remote Access (SRA)
known ransomware use
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
- Added to KEV
2022-03-28- Federal due date
2022-04-18- Vendor
- SonicWall
- Product
- Secure Remote Access (SRA)
- EPSS
- 98.0th percentile (score 0.301, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Known
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2021-20028
CISA short description
SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.
Required action
The impacted product is end-of-life and should be disconnected if still in use.