CVE-2021-20025
CVE-2021-20025
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 May 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.
Affected products
SonicWall · Email Security Virtual ApplianceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →