CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability

EPSS trend

Probability

16.64%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.13 pp

From 16.51% on 19-09-2026

19-09-202619-10-2026

EPSS score

16.64%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 03-11-2021
Federal due date: 17-11-2021

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2021-20022

Public exploits

0 found

No public exploits indexed.

References

2 links

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008X Refsource CONFIRMVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022Government ResourceUS Government Resource

Related vulnerabilities

CVE-2018-3639alpinexen+55760.63%8y ago22-05-2018 12:00Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVE-2021-20021sonicwallemail_security+10KEVRansomware88.78%5y ago09-04-2021 17:50A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.CVE-2021-20023sonicwallemail_security+10KEVRansomware51.69%5y ago20-04-2021 11:55SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.CVE-2021-44228apache software foundationapache log4j2+144KEVRansomware100.00%4y ago10-12-2021 00:00Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.CVE-2021-45105apache software foundationapache log4j2+125100.00%4y ago18-12-2021 11:55Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.CVE-2021-45046apache software foundationapache log4j+47KEVRansomware99.98%4y ago14-12-2021 16:55It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.

All vulnerabilities inemail_security email_security_appliance_3300_firmware email_security_appliance_4300_firmware email_security_appliance_5000_firmware email_security_appliance_5050_firmware

CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References