Fiche vulnérabilité
CVE-2021-20021 : faille exploitée sonicwall email security (CVSS 9.8)
Description
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Oui, inscrite au catalogue CISA KEV
- Publication
- 9 avr. 2021
- Dernière mise à jour
- 12 août 2026
Produits concernés
- sonicwall email security
- sonicwall email security appliance 9000 firmware
- sonicwall email security appliance 3300 firmware
- sonicwall email security appliance 4300 firmware
- sonicwall email security appliance 8300 firmware
- sonicwall email security appliance 5000 firmware
- sonicwall email security appliance 7000 firmware
- sonicwall email security appliance 5050 firmware
- sonicwall email security appliance 7050 firmware
- sonicwall email security virtual appliance
- sonicwall hosted email security
Correctif et mesures
Apply updates per vendor instructions.