CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability
SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20023 to achieve privilege escalation.
Other sources
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20022?
CVE-2021-20022 is a vulnerability in SonicWall Email Security that allows a post-authenticated attacker to upload a file to the remote host.
How severe is CVE-2021-20022?
CVE-2021-20022 has a severity rating of 7.2 (high).
What is the affected software for CVE-2021-20022?
The affected software for CVE-2021-20022 is SonicWall Email Security version up to 10.0.9.6103.
How can the SonicWall Email Security unrestricted upload of file vulnerability be exploited?
The SonicWall Email Security unrestricted upload of file vulnerability can be exploited by a post-authenticated attacker to upload malicious files.
Is there a fix available for CVE-2021-20022?
Yes, SonicWall has released a fix for CVE-2021-20022. It is recommended to update to the latest version of SonicWall Email Security.