Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2021-20023

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

Published: Apr 20, 2021
Updated: Nov 13, 2025
CVE: CVE-2021-20023
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.9
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

CWE-22

OWASP TOP 10:

A5 - Broken Access Control

Affected Software
References

Software	From	Fixed in
sonicwall / email_security	-	10.0.9.6173
sonicwall / hosted_email_security	-	10.0.9.6173
sonicwall / email_security_appliance_9000_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_3300_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_4300_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_8300_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_5000_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_7000_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_5050_firmware	-	10.0.9.6177
sonicwall / email_security_appliance_7050_firmware	-	10.0.9.6177
sonicwall / email_security_virtual_appliance	-	10.0.9.6177

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo