Lucene search

[email protected]CVE-2021-20019

HistoryJun 23, 2021 - 10:15 p.m.

CVE-2021-20019

2021-06-2322:15:00

CWE-119

[email protected]

web.nvd.nist.gov

cve

2021

20019

sonicos

http server

vulnerability

sensitive data disclosure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.9%

JSON

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.

CPENameOperatorVersion
sonicwall:sonicossonicwall sonicoslt7.0.1-r1036
sonicwall:sonicossonicwall sonicoslt7.0.0.376
sonicwall:sonicossonicwall sonicoseq6.0.5.3-94o
sonicwall:sonicossonicwall sonicoseq6.5.1.12-3n
sonicwall:sonicosvsonicwall sonicosveq6.5.4.4-44v-21-955
sonicwall:sonicossonicwall sonicoseq6.5.4.7-83n

CPE	Name	Operator	Version
sonicwall:sonicos	sonicwall sonicos	lt	7.0.1-r1036
sonicwall:sonicos	sonicwall sonicos	lt	7.0.0.376
sonicwall:sonicos	sonicwall sonicos	eq	6.0.5.3-94o
sonicwall:sonicos	sonicwall sonicos	eq	6.5.1.12-3n
sonicwall:sonicosv	sonicwall sonicosv	eq	6.5.4.4-44v-21-955
sonicwall:sonicos	sonicwall sonicos	eq	6.5.4.7-83n

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.9%

JSON

Related for CVE-2021-20019

prion1 nessus1 thn1 threatpost1 avleonov1