Lucene search
HistoryOct 12, 2021 - 11:15 p.m.
CVE-2021-20031
sonicos
host header redirection
remote attacker
firewall management
web domains
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.019
Percentile
88.6%
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
Affected configurations
Node
sonicwallnsa_2650Match-
ORsonicwallnsa_2700Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_3700Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_4700Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6650Match-
ORsonicwallnsa_6700Match-
ORsonicwallnsa_9250Match-
ORsonicwallnsa_9450Match-
ORsonicwallnsa_9650Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz300Match-
ORsonicwalltz300pMatch-
ORsonicwalltz300wMatch-
ORsonicwalltz350Match-
ORsonicwalltz350wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz400Match-
ORsonicwalltz400wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz500Match-
ORsonicwalltz500wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz600Match-
ORsonicwalltz600pMatch-
ORsonicwalltz670Match-
sonicwallsonicosRange≤7.0.1-r1262
Node
sonicwallnsv_10Match-
ORsonicwallnsv_100Match-
ORsonicwallnsv_1600Match-
ORsonicwallnsv_200Match-
ORsonicwallnsv_25Match-
ORsonicwallnsv_270Match-
ORsonicwallnsv_300Match-
ORsonicwallnsv_400Match-
ORsonicwallnsv_470Match-
ORsonicwallnsv_50Match-
ORsonicwallnsv_800Match-
ORsonicwallnsv_870Match-
sonicwallsonicosRange≤7.0.1-r1283
Node
sonicwallnssp_12400Match-
ORsonicwallnssp_12800Match-
ORsonicwallnssp_13700Match-
ORsonicwallnssp_15700Match-
sonicwallsonicosRange≤7.0.1-r579
Node
sonicwallnsa_2650Match-
ORsonicwallnsa_2700Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_3700Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_4700Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6650Match-
ORsonicwallnsa_6700Match-
ORsonicwallnsa_9250Match-
ORsonicwallnsa_9450Match-
ORsonicwallnsa_9650Match-
ORsonicwallsoho_250wMatch-
ORsonicwallsupermassive_9200Match-
ORsonicwallsupermassive_9400Match-
ORsonicwallsupermassive_9600Match-
ORsonicwallsupermassive_9800Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz300Match-
ORsonicwalltz300pMatch-
ORsonicwalltz300wMatch-
ORsonicwalltz350Match-
ORsonicwalltz350wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz400Match-
ORsonicwalltz400wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz500Match-
ORsonicwalltz500wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz600Match-
ORsonicwalltz600pMatch-
ORsonicwalltz670Match-
sonicwallsonicosRange≤6.5.4.7
Node
sonicwallnssp_12400Match-
ORsonicwallnssp_12800Match-
ORsonicwallsupermassive_9800Match-
sonicwallsonicosRange≤6.5.1.12
Node
sonicwallsupermassive_e10200Match-
ORsonicwallsupermassive_e10400Match-
ORsonicwallsupermassive_e10800Match-
sonicwallsonicosRange≤6.0.5.3-94o
Node
sonicwallnsa_2650Match-
ORsonicwallnsa_2700Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_3700Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_4700Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6650Match-
ORsonicwallnsa_6700Match-
ORsonicwallnsa_9250Match-
ORsonicwallnsa_9450Match-
ORsonicwallnsa_9650Match-
ORsonicwallsoho_250Match-
ORsonicwallsoho_250wMatch-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz300Match-
ORsonicwalltz300pMatch-
ORsonicwalltz300wMatch-
ORsonicwalltz350Match-
ORsonicwalltz350wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz400Match-
ORsonicwalltz400wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz500Match-
ORsonicwalltz500wMatch-
sonicwallsonicosRange≤5.9.1.13
Related
nuclei
nuclei
SonicWall SonicOS 7.0 - Open Redirect
2021-10-17 23:24:29
packetstorm
packetstorm
Sonicwall SonicOS 7.0 Host Header Injection
2021-10-13 00:00:00
cve
cve
CVE-2021-20031
2021-10-12 23:15:07
prion
prion
Design/Logic Flaw
2021-10-12 23:15:00
zdt
zdt
Sonicwall SonicOS 7.0 - Host Header Injection Vulnerability
2021-10-13 00:00:00
cvelist
cvelist
CVE-2021-20031
2021-10-12 22:55:09
exploitdb
exploitdb
Sonicwall SonicOS 7.0 - Host Header Injection
2021-10-13 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.019
Percentile
88.6%
Related for NVD:CVE-2021-20031