// For flags

CVE-2021-20023

SonicWall Email Security Path Traversal Vulnerability

Severity Score

4.9
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

SonicWall Email Security versiĆ³n 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente leer un archivo arbitrario en el host remoto

SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-12-17 CVE Reserved
  • 2021-04-20 CVE Published
  • 2021-11-03 Exploited in Wild
  • 2021-11-17 KEV Due Date
  • 2024-01-30 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- First Exploit
CWE
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sonicwall
Search vendor "Sonicwall"
Email Security
Search vendor "Sonicwall" for product "Email Security"
< 10.0.9.6173
Search vendor "Sonicwall" for product "Email Security" and version " < 10.0.9.6173"
email_security_virtual_appliance
Affected
Sonicwall
Search vendor "Sonicwall"
Email Security
Search vendor "Sonicwall" for product "Email Security"
< 10.0.9.6173
Search vendor "Sonicwall" for product "Email Security" and version " < 10.0.9.6173"
windows
Affected
Sonicwall
Search vendor "Sonicwall"
Hosted Email Security
Search vendor "Sonicwall" for product "Hosted Email Security"
< 10.0.9.6173
Search vendor "Sonicwall" for product "Hosted Email Security" and version " < 10.0.9.6173"
-
Affected