CVE-2021-20022

🗓️ 09 Apr 2021 17:50:15Reported by sonicwallType

SonicWall Email Security v10.0.9.x Arbitrary File Upload Vulnerabilit

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2021-20022	9 Apr 202100:00	–	attackerkb
BDU FSTEC	The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security allow for unlimited downloading of malicious files, enabling attackers to compromise the confidentiality, integrity, and accessibility of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security solutions from SonicWall, such as SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insufficient file checking during loading. This allows attackers to gain unauthorized access to protected information.	16 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20022	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Unrestricted Upload of File Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SonicWall Releases Patches for Email Security Products	21 Apr 202100:00	–	cisa
CNNVD	Sonicwall SonicWall Email Security Appliance 代码问题漏洞	9 Apr 202100:00	–	cnnvd
CNVD	SonicWall Email Security Arbitrary File Upload Vulnerability	14 Apr 202100:00	–	cnvd
Check Point Advisories	SonicWall Email Security Arbitrary File Upload (CVE-2021-20022)	15 Feb 202200:00	–	checkpoint_advisories
CVE	CVE-2021-20022	9 Apr 202117:50	–	cve

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008

09 Apr 2021 17:50Current

8.5High risk

Vulners AI Score8.5

EPSS0.16509

CWE-434