CVE-2021-20031

MEDIUM severity · CVSS 6.1 · CWE-601

6.1CVSS MEDIUM

Summary

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionRequired

Confidentiality impactLow

Integrity impactLow

Availability impactNone

Exploit probability (EPSS)36%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products we track (1)

SonicWall SonicOS

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019Advisory
http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.htmlAdvisory
http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.htmlAdvisory