All CVE records
CVE-2021-20023 — SonicWall Email Security Path Traversal Vulnerability
Known ransomware use
CISA KEV listed
Added November 3, 2021 Remediate by November 17, 2021
Description
SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.