A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
| Software | From | Fixed in |
|---|---|---|
| sonicwall / email_security | - | 10.0.9.6103 |
| sonicwall / hosted_email_security | - | 10.0.9.6103 |
| sonicwall / email_security_appliance_9000_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_3300_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_4300_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_8300_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_5000_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_7000_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_5050_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_appliance_7050_firmware | - | 10.0.9.6105 |
| sonicwall / email_security_virtual_appliance | - | 10.0.9.6105 |