CVE-2021-20022

CVE-2021-20022 is a high-severity (CVSS 7.2) vulnerability in SonicWall SonicWall Email Security. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by November 17, 2021. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. SonicWall has 19 vulnerabilities in the KEV catalog, 13 of them linked to ransomware.

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022