Sonicwall Email Security Virtual Appliance vulnerabilities
4 vulnerabilities
Known vulnerabilities in Sonicwall Email Security Virtual Appliance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-20025sonicwallemail_security_virtual_appliance
EPSS score0.36%
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.CVE-2021-20021sonicwallemail_security+10KEVRansomwareEPSS score88.78%
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.CVE-2021-20022sonicwallemail_security+10KEVRansomwareEPSS score16.64%
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.CVE-2021-20023sonicwallemail_security+10KEVRansomwareEPSS score51.69%
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.