CVE-2021-20023

EUVD-2021-7486 · Published Apr 20, 2021

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

Technologies

Sonicwall Email SecuritySonicwall Email Security Appliance 4300 FirmwareSonicwall Email Security Appliance 8300Sonicwall Email Security Appliance 5050 FirmwareSonicwall Email Security Appliance 5000Sonicwall Email Security Appliance 7050 FirmwareSonicwall Email Security Appliance 9000Sonicwall Email Security Appliance 5000 FirmwareSonicwall Email Security Appliance 7000Sonicwall Email Security Appliance 7000 FirmwareSonicwall Email Security Virtual ApplianceSonicwall Email Security Appliance 8300 FirmwareSonicwall Hosted Email SecuritySonicwall Email Security Appliance 7050Microsoft WindowsSonicwall Email Security Appliance 5050Sonicwall Email Security Appliance 3300 FirmwareSonicwall Email Security Appliance 3300Sonicwall Email Security Appliance 9000 FirmwareSonicwall Email Security Appliance 4300

Weaknesses

CWE-22

CVSS scores

v3.14.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
v2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

Potentially impacted assets

See if this affects your attack surface