CVE-2021-20023 SonicWall SonicWall Email Security
SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.
- CVSS
- not scored
On CISA’s exploited list
SonicWall Email Security Path Traversal Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2021-11-17
- Ransomware use
- known