CVE Watch—

CVE-2021-20022

SonicWall Email Security Unrestricted Upload of File Vulnerability

CVSS

—

Sin CVSS

EPSS

16.5%

p97

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

16.5%EPSS · 30 días16.5%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

SonicWall / SonicWall Email Security

Vulnerabilidad

SonicWall Email Security Unrestricted Upload of File Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Sí

Descripción resumida

SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20023 to achieve privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-20022

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-20021—

99.7%

KEV—80SonicWall Email Security Improper Privilege Management Vulnerability—CVE-2021-20023—

98.8%

KEV—80SonicWall Email Security Path Traversal Vulnerability—