Vulnerabilities fixed in SonicWall Email Security

🗓️ 12 Apr 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Vulnerabilities in SonicWall Email Security fixed; local attacker could gain privileges and execute code.

Reporter	Title	Published	Views	Family All 45
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ATTACKERKB	CVE-2021-20022	9 Apr 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-20021	9 Apr 202100:00	–	attackerkb
BDU FSTEC	The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security allow for unlimited downloading of malicious files, enabling attackers to compromise the confidentiality, integrity, and accessibility of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security, related to insecure privilege management, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security solutions from SonicWall, such as SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insufficient file checking during loading. This allows attackers to gain unauthorized access to protected information.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insecure privilege management. This allows attackers to create accounts with administrator privileges.	20 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20021	21 Apr 202101:32	–	circl
Circl	CVE-2021-20022	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Improper Privilege Management Vulnerability	3 Nov 202100:00	–	cisa_kev

12 Apr 2021 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.5

CVSS 3.19.8

EPSS0.83425

SonicWall Email Security local attacker elevated privileges arbitrary code security updates vulnerability fixes