CVE-2021-20021

🗓️ 09 Apr 2021 17:50:14Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1212 Views

A vulnerability in SonicWall Email Security 10.0.9.x allows attacker to create admin account via crafted HTTP request

Reporter	Title	Published	Views	Family All 29
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ATTACKERKB	CVE-2021-20022	9 Apr 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-20021	9 Apr 202100:00	–	attackerkb
BDU FSTEC	The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security, related to insecure privilege management, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insecure privilege management. This allows attackers to create accounts with administrator privileges.	20 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20021	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Improper Privilege Management Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SonicWall Releases Patches for Email Security Products	21 Apr 202100:00	–	cisa
CNNVD	Sonicwall SonicWall Email Security Appliance 安全漏洞	9 Apr 202100:00	–	cnnvd
CNVD	SonicWall Email Security Administrator Account Creation Vulnerability	14 Apr 202100:00	–	cnvd

NVD

Vulners

Node

sonicwall email_securityRange<10.0.9.6103

AND

microsoft windowsMatch-

Node

sonicwall email_security_appliance_9000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_9000Match-

Node

sonicwall email_security_appliance_3300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_3300Match-

Node

sonicwall email_security_appliance_4300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_4300Match-

Node

sonicwall email_security_appliance_8300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_8300Match-

Node

sonicwall email_security_appliance_5000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_5000Match-

Node

sonicwall email_security_appliance_7000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_7000Match-

Node

sonicwall email_security_appliance_5050_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_5050Match-

Node

sonicwall email_security_appliance_7050_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_7050Match-

Node

sonicwall email_security_virtual_applianceRange<10.0.9.6105

sonicwall hosted_email_securityRange<10.0.9.6103

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 03:33Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.19.8

EPSS0.83425

SSVC