Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2021-20038

Your trail

Where next?

Selected cve

CVE-2021-20038

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

21 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority89.5–90.5

Coverage99.1%

Connections11

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 11

has cited scope1 retained · stored CVE-2021-20038 → SonicWall · SonicWall SMA100

ab722841-720e-46b9-bdc0-539d8065845b

has environmental constraint1 retained · stored CVE-2021-20038 → sonicwall · sma_500v

4652032d-d2dd-4a5b-a7ba-48558546a067

has environmental constraint1 retained · stored CVE-2021-20038 → sonicwall · sma_400

bd0d81e0-c3ad-41cb-bb48-a87eeb0f4612

has environmental constraint1 retained · stored CVE-2021-20038 → sonicwall · sma_210

0a2463f6-e547-4c3f-ba61-15f30da46426

has environmental constraint1 retained · stored CVE-2021-20038 → sonicwall · sma_410

7ffa01a7-ac3d-43be-b043-d9c171eb2188

has environmental constraint1 retained · stored CVE-2021-20038 → sonicwall · sma_200

f83a755f-b1a7-452f-bf28-d706fc0d404f

has vulnerable target scope3 retained · stored CVE-2021-20038 → sonicwall · sma_200_firmware

031cae2d-cee3-4085-a5c9-505aa80c44e919ac6004-bbfb-4638-ae2d-24ffc2081634c4606914-1705-40df-9960-f331543998d0

has vulnerable target scope3 retained · stored CVE-2021-20038 → sonicwall · sma_210_firmware

97dc9fc1-26e1-4059-92d1-18b329487d239fc21659-721b-4b82-a8bb-4f9e2b73a08caf1ca8c8-3322-42e1-9768-95cea17324b6

has vulnerable target scope3 retained · stored CVE-2021-20038 → sonicwall · sma_500v_firmware

1186935a-7851-49df-a722-33e3144ed7bd5bb39c79-e2ee-453f-b4bc-26864c6b8bd8ffb6afad-d176-4f36-80ba-36719472f8df

has vulnerable target scope3 retained · stored CVE-2021-20038 → sonicwall · sma_410_firmware

4c9ed07a-642b-4054-b88b-f05190771add687ddce3-f568-4dec-bd5c-950d4d078b966b5349f1-46f9-4d60-b98c-af304e072521

has vulnerable target scope3 retained · stored CVE-2021-20038 → sonicwall · sma_400_firmware

074a3e50-5ac3-4f33-a75d-70b197074c48d636df01-99f8-41e5-a3a1-bd6e180b4074e6073db1-de71-4a60-9168-e655ddd1c3ec

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 12 entities · 11 relationships · bounded complete