imPC@ndo IT

Tracker / CVE-2021-20022

CVE-2021-20022

Ransomware High 7.2

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

Affected products and versions

sonicwall email_security · … → 10.0.9.6103
sonicwall email_security_appliance_3300_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_4300_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_5000_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_5050_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_7000_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_7050_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_8300_firmware · … → 10.0.9.6105
sonicwall email_security_appliance_9000_firmware · … → 10.0.9.6105
sonicwall email_security_virtual_appliance · … → 10.0.9.6105
sonicwall hosted_email_security · … → 10.0.9.6103

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References