CVE-2021-20022

🗓️ 09 Apr 2021 17:50:15Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 1102 Views

SonicWall Email Security v10.0.9.x vulnerability allows arbitrary file uploa

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2021-20022	9 Apr 202100:00	–	attackerkb
BDU FSTEC	The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security allow for unlimited downloading of malicious files, enabling attackers to compromise the confidentiality, integrity, and accessibility of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security solutions from SonicWall, such as SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insufficient file checking during loading. This allows attackers to gain unauthorized access to protected information.	16 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20022	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Unrestricted Upload of File Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SonicWall Releases Patches for Email Security Products	21 Apr 202100:00	–	cisa
CNNVD	Sonicwall SonicWall Email Security Appliance 代码问题漏洞	9 Apr 202100:00	–	cnnvd
CNVD	SonicWall Email Security Arbitrary File Upload Vulnerability	14 Apr 202100:00	–	cnvd
Check Point Advisories	SonicWall Email Security Arbitrary File Upload (CVE-2021-20022)	15 Feb 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-20022	9 Apr 202117:50	–	cvelist

NVD

Vulners

Node

sonicwall email_securityRange<10.0.9.6103

AND

microsoft windowsMatch-

Node

sonicwall email_security_appliance_9000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_9000Match-

Node

sonicwall email_security_appliance_3300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_3300Match-

Node

sonicwall email_security_appliance_4300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_4300Match-

Node

sonicwall email_security_appliance_8300_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_8300Match-

Node

sonicwall email_security_appliance_5000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_5000Match-

Node

sonicwall email_security_appliance_7000_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_7000Match-

Node

sonicwall email_security_appliance_5050_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_5050Match-

Node

sonicwall email_security_appliance_7050_firmwareRange<10.0.9.6105

AND

sonicwall email_security_appliance_7050Match-

Node

sonicwall email_security_virtual_applianceRange<10.0.9.6105

sonicwall hosted_email_securityRange<10.0.9.6103

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

10 Nov 2025 19:07Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.2

CVSS 27.5

EPSS0.16509

SSVC