Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2021-20021

CVE-2021-20021

Medium
Open
KEV
TLP:CLEAR

SonicWall Email Security Improper Privilege Management Vulnerability

AI Analysis

No AI analysis yet.

Description

SonicWall — SonicWall Email Security — SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20022 and CVE-2021-20023 to achieve privilege escalation.

Details

EPSS Score
83.43%

99.7th percentile

Confidence
100%
CISA KEV
Date Added
Nov 3, 2021
Patch Due
Nov 17, 2021
Used in ransomware campaigns
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.