CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Utilisation connue

Faiblesse CWE-22

Description

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Email Security	Versions non publiées

Autres CVE de Email Security

Les 11 CVE de Email Security →

CVE-2026-66150 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows… 7.8 Élevée CVE-2026-66149 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows… 7.8 Élevée CVE-2026-3470 A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to… 3.8 Faible CVE-2026-3469 A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security… 2.7 Faible