Critical severity9.8CISA KEVNVD Advisory· Published Apr 9, 2021· Updated Aug 12, 2026
CVE-2021-20021
CVE-2021-20021
Description
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*range: <10.0.9.6103
- (no CPE)range: 10.0.9.x
- (no CPE)range: 10.0.9 and earlier
- cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*Range: <10.0.9.6103
- cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.