Exploit / PoCcritical

Hackers found leveraging three SonicWall zero-day vulnerabilities

Help Net Securityby @zeljkazorzApr 21, 2021 · 00:00 UTC (Apr 21, 2021)2 min read1

Read at helpnetsecurity.com

Analyze CVE-2021-20021 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-20021 CVE-2021-20022 CVE-2021-20023

Tags: cve-2021-20021 cve-2021-20022 cve-2021-20023 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20021 +1 related CVE CVE-2021-20022	Improper Privilege Management in SonicWall Email Security 10.0.9.x Grants Admin Access	9.8 group max	89%	KEVRansomware	Apr 9, 2021 KEV Nov 3, 2021
CVE-2021-20023	Post-Auth Path Traversal Arbitrary File Read in SonicWall Email Security 10.0.9.x	4.9	52%	KEVRansomware	Apr 20, 2021 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

Attackers that seem to have “intimate knowledge” of the SonicWall Email Security product have been discovered leveraging three (at the time) zero-day vulnerabilities in the popular enterprise solution.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.