9.8
Critique
CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-306
Description
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Email Security | Versions non publiées |
Autres CVE de Email Security
Les 11 CVE de Email Security →
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
Élevée
CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
Élevée
CVE-2026-3470
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to…
3.8
Faible
CVE-2026-3469
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security…
2.7
Faible