Not rated

CVE-2021-20025 SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password…

Description

SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.

Affected products and versions

Product	Affected versions	Fixed in
Email Security Virtual Appliance	Versions not published

Do you use Email Security Virtual Appliance?

Track this CVE Watch Email Security Virtual Appliance Check my SBOMs

cveye.io/en/cve/CVE-2021-20025

Timeline

Published May 13, 2021
Last modified August 3, 2024

References

psirt.global.sonicwall.com psirt.global.sonicwall.com

Track this CVE