peter bassill · operator
$ cve CVE-2021-20031 JSON

CVE-2021-20031 EXPLOIT

6.1
MEDIUM · CVSS 3.1 · EPSS 13% (pctl 96)

Patch early

A public exploit exists.

Description

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

Scoring

CVSS6.1 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS13.04% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-601
On CISA KEVno
Public exploityes
Published2021-10-12
Last modified2026-06-17

Affected (40)

VendorProduct
sonicwallnsa 2650
sonicwallnsa 2700
sonicwallnsa 3650
sonicwallnsa 3700
sonicwallnsa 4650
sonicwallnsa 4700
sonicwallnsa 5650
sonicwallnsa 6650
sonicwallnsa 6700
sonicwallnsa 9250
sonicwallnsa 9450
sonicwallnsa 9650
sonicwallnsv 10
sonicwallnsv 100
sonicwallnsv 1600
sonicwallnsv 200
sonicwallnsv 25
sonicwallnsv 270
sonicwallsonicos
sonicwalltz270
sonicwalltz270w
sonicwalltz300
sonicwalltz300p
sonicwalltz300w
sonicwalltz350
sonicwalltz350w
sonicwalltz370
sonicwalltz370w
sonicwalltz400
sonicwalltz400w
sonicwalltz470
sonicwalltz470w
sonicwalltz500
sonicwalltz500w
sonicwalltz570
sonicwalltz570p
sonicwalltz570w
sonicwalltz600
sonicwalltz600p
sonicwalltz670

Public exploits

SourceTitleDate
exploit-dbSonicwall SonicOS 7.0 - Host Header Injection2021-10-13

References

→ the Explorer  ·  watch your stack  ·  NVD