CVE-2021-20025CWE-798

CVE-2021-20025: fallo en SonicWall Email Security Virtual Appliance

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Email Security Virtual Appliance

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.4%
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.
Productos afectados
SonicWall · Email Security Virtual Appliance