Actively exploited · Published Apr 20, 2021 · Assigned by sonicwall
CVE-2021-20023
Medium 4.9 Exploited Ransomware
In plain English
A medium-severity path traversal in Email Security from SonicWall. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 51.7% (higher than 99% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Nov 17, 2021.
Official description
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Email Security | 10.0.9 and earlier |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20023 government-resource