CVE-2021-20023

🗓️ 20 Apr 2021 11:55:13Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1063 Views

SonicWall Email Security version 10.0.9.x vulnerability for arbitrary file rea

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2021-20023	20 Apr 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of SonicWall Email Security’s email security software lies in the improper restriction of the path to the restricted directory. This allows attackers to gain unauthorized access to the protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.	20 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20023	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Path Traversal Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SonicWall Releases Patches for Email Security Products	21 Apr 202100:00	–	cisa
CNNVD	Sonicwall On-premise Email 路径遍历漏洞	20 Apr 202100:00	–	cnnvd
CNVD	Sonicwall On-premise Email Path Traversal Vulnerability	22 Apr 202100:00	–	cnvd
Check Point Advisories	SonicWall Email Security Directory Traversal (CVE-2021-20023)	16 Jan 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-20023	20 Apr 202111:55	–	cvelist

NVD

Vulners

Node

sonicwall email_securityRange<10.0.9.6173

AND

microsoft windowsMatch-

Node

sonicwall email_security_appliance_9000_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_9000Match-

Node

sonicwall email_security_appliance_3300_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_3300Match-

Node

sonicwall email_security_appliance_4300_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_4300Match-

Node

sonicwall email_security_appliance_8300_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_8300Match-

Node

sonicwall email_security_appliance_5000_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_5000Match-

Node

sonicwall email_security_appliance_7000_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_7000Match-

Node

sonicwall email_security_appliance_5050_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_5050Match-

Node

sonicwall email_security_appliance_7050_firmwareRange<10.0.9.6177

AND

sonicwall email_security_appliance_7050Match-

Node

sonicwall email_security_virtual_applianceRange<10.0.9.6177

sonicwall hosted_email_securityRange<10.0.9.6173

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

12 Nov 2025 14:32Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24

CVSS 3.14.9

EPSS0.51407

SSVC