CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-20021

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score48.8280%
EPSS Percentile86.73th
Published2021-04-09
Last Modified2025-11-10
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.

Affected Platforms (CPE)

📦
Sonicwall

Email Security

< 10.0.9.6103
💻
Sonicwall

Email Security Appliance 9000 Firmware

< 10.0.9.6105
💻
Sonicwall

Email Security Appliance 3300 Firmware

< 10.0.9.6105
💻
Sonicwall

Email Security Appliance 4300 Firmware

< 10.0.9.6105

References & Advisories

🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007
🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20021

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 23 日

本期情报重点包含 CISA 将 Langflow CVE-2026-0770 远程代码执行漏洞列入 KEV 已知利用目录、Windmill CVE-2026-29059 未经身份验证路径穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持续追踪与防御建议。

2026-07-23

每日全球网络威胁情报摘要｜2026 年 7 月 20 日

本期安全威胁情报汇整：SonicWall SMA1000 零日漏洞链利用、NGINX 正规表示式 Heap 溢出漏洞 (CVE-2026-42533)、Sandworm 子集群 UAC-0145 利用 ClickFix 的攻击活动，以及 HelloNet 透过 ViPNet DLL 侧载事件。

2026-07-20

相关漏洞威胁

CVE-2026-132687.8

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta...

CVE-2026-83389.2

A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An un...

CVE-2026-546938.2

ZITADEL is an open source identity management platform. From 2.43.0 through 2.71.19, from 3.0.0 until 3.4.11, and from 4.0.0 until...

CVE-2026-203165.3

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, rem...