CVE-2021-20031

medium · 6.1

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

6.1

CVSS

13.0%

EPSS (exploit prob.)

96th

EPSS percentile

2021-10-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-601

Affected products

Vendor	Product	Affected versions
sonicwall	sonicos	<= 7.0.1-r1262
sonicwall	nsa_2650	all versions
sonicwall	nsa_2700	all versions
sonicwall	nsa_3650	all versions
sonicwall	nsa_3700	all versions
sonicwall	nsa_4650	all versions
sonicwall	nsa_4700	all versions
sonicwall	nsa_5650	all versions
sonicwall	nsa_6650	all versions
sonicwall	nsa_6700	all versions
sonicwall	nsa_9250	all versions
sonicwall	nsa_9450	all versions
sonicwall	nsa_9650	all versions
sonicwall	tz270	all versions
sonicwall	tz270w	all versions
sonicwall	tz300	all versions
sonicwall	tz300p	all versions
sonicwall	tz300w	all versions
sonicwall	tz350	all versions
sonicwall	tz350w	all versions
sonicwall	tz370	all versions
sonicwall	tz370w	all versions
sonicwall	tz400	all versions
sonicwall	tz400w	all versions
sonicwall	tz470	all versions
sonicwall	tz470w	all versions
sonicwall	tz500	all versions
sonicwall	tz500w	all versions
sonicwall	tz570	all versions
sonicwall	tz570p	all versions
sonicwall	tz570w	all versions
sonicwall	tz600	all versions
sonicwall	tz600p	all versions
sonicwall	tz670	all versions
sonicwall	sonicos	<= 7.0.1-r1283
sonicwall	nsv_10	all versions
sonicwall	nsv_100	all versions
sonicwall	nsv_1600	all versions
sonicwall	nsv_200	all versions
sonicwall	nsv_25	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-20031