CVE-2021-20021

2021-04-0917:50:14

CWE-269

sonicwall

www.cve.org

sonicwall email security

vulnerability

crafted http request

administrative account

remote host

AI Score

9.5

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.

CNA Affected

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]