Medium severity6.1NVD Advisory· Published Oct 12, 2021· Updated Jun 17, 2026

CVE-2021-20031

Description

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SonicWall/Sonicos3 versions
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*range: <=7.0.1-r1262
- (no CPE)
- (no CPE)range: 7.0.1-R1262 and earlier

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000