CVE-2021-20019

2021-06-2321:45:11

CWE-200

sonicwall

www.cve.org

0.005 Low

EPSS

Percentile

77.5%

JSON

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.

CNA Affected

[
  {
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SonicOS - 6.5.4.7-83n"
      },
      {
        "status": "affected",
        "version": "SonicOSv - 6.5.4.4-44v-21-955"
      },
      {
        "status": "affected",
        "version": "SonicOS - 6.5.1.12-3n"
      },
      {
        "status": "affected",
        "version": "SonicOS - 6.0.5.3-94o"
      },
      {
        "status": "affected",
        "version": "SonicOS - 7.0.0-R713 and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS - 7.0.1-R1036 and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS - 7.0.0.375 and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006

0.005 Low

EPSS

Percentile

77.5%

JSON

Related for CVELIST:CVE-2021-20019