Actively exploited · Published Apr 9, 2021 · Assigned by sonicwall
CVE-2021-20022
High 7.2 Exploited Ransomware
In plain English
A high-severity unrestricted file upload in Email Security from SonicWall. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 16.6% (higher than 97% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Nov 17, 2021.
Official description
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Email Security | 10.0.9 and earlier |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022 government-resource