Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2021-20023

CVE-2021-20023

Medium
Open
KEV
TLP:CLEAR

SonicWall Email Security Path Traversal Vulnerability

AI Analysis

No AI analysis yet.

Description

SonicWall — SonicWall Email Security — SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.

Details

EPSS Score
50.23%

98.8th percentile

Confidence
100%
CISA KEV
Date Added
Nov 3, 2021
Patch Due
Nov 17, 2021
Used in ransomware campaigns
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.