imPC@ndo IT

Tracker / CVE-2021-20023

CVE-2021-20023

Ransomware Medium 4.9

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

Affected products and versions

sonicwall email_security · … → 10.0.9.6173
sonicwall email_security_appliance_3300_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_4300_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_5000_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_5050_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_7000_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_7050_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_8300_firmware · … → 10.0.9.6177
sonicwall email_security_appliance_9000_firmware · … → 10.0.9.6177
sonicwall email_security_virtual_appliance · … → 10.0.9.6177
sonicwall hosted_email_security · … → 10.0.9.6173

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References