High severity7.2CISA KEVNVD Advisory· Published Apr 9, 2021· Updated Aug 12, 2026
CVE-2021-20022
CVE-2021-20022
Description
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*range: <10.0.9.6103
- (no CPE)range: 10.0.9.x
- (no CPE)range: 10.0.9 and earlier
- cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*Range: <10.0.9.6103
- cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
- cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*Range: <10.0.9.6105
Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.