CVE-2021-20022 PUBLISHED KEV CVSS 7.5 HIGH

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

EPSS 20.02% · 95.4th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
20.02%
95.4th percentile

Affected Products

VendorProductVersions
sonicwallemail_security_appliance_3300_firmware0
sonicwallemail_security_appliance_8300_firmware0
sonicwallemail_security_appliance_7000_firmware0
sonicwallemail_security_appliance_5050_firmware0
sonicwallemail_security_appliance_7050_firmware0
sonicwallhosted_email_security0
sonicwallemail_security_appliance_5000_firmware0
sonicwallemail_security_appliance_9000_firmware0
sonicwallemail_security_virtual_appliance0
sonicwallemail_security0
SonicWallEmail Security10.0.9 and earlier
sonicwallemail_security_appliance_4300_firmware0

Timeline

References

Open in Interactive Console →