CVE-2021-20023
unknown
KEV
CVSS v3
—
CVSS v2
—
VIR risk
1.5
Description
SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.
CISA KEV
- Vendor
- SonicWall
- Product
- SonicWall Email Security
- Due date
- 2021-11-17
Predictions
Exploit likelihood
99%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cisa-kev — https://nvd.nist.gov/vuln/detail/CVE-2021-20023
Exploits
References
Verify integrity in audit chain (admin only). AS-IS.