Vulnerability · Published Jun 23, 2021 · Assigned by sonicwall

CVE-2021-20019

High 7.5

In plain English

A high-severity information exposure in SonicOS from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.4%top 27.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	SonicOS	SonicOS - 6.5.4.7-83nSonicOSv - 6.5.4.4-44v-21-955SonicOS - 6.5.1.12-3nSonicOS - 6.0.5.3-94oSonicOS - 7.0.0-R713 and earlierSonicOS - 7.0.1-R1036 and earlierSonicOS - 7.0.0.375 and earlier

Weakness: CWE-200

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006 x_refsource_CONFIRM