Exploit / PoCcriticalExploited in the wild

3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances

The Hacker Newsby @TheHackersNewsApr 21, 2021 · 17:43 UTC (Apr 21, 2021)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2021-20021 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-20021 CVE-2021-20022 CVE-2021-20023

Tags: cve-2021-20021 cve-2021-20022 cve-2021-20023 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20021 +1 related CVE CVE-2021-20022	Improper Privilege Management in SonicWall Email Security 10.0.9.x Grants Admin Access	9.8 group max	89%	KEVRansomware	Apr 9, 2021 KEV Nov 3, 2021
CVE-2021-20023	Post-Auth Path Traversal Arbitrary File Read in SonicWall Email Security 10.0.9.x	4.9	52%	KEVRansomware	Apr 20, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.