CVE-2021-20022

CVE-2021-20022

Vendor Sonicwall

Product Email Security

Weakness CWE-434 · Unrestricted file upload

KEV Status Known Exploited

Ransomware Used in campaigns

Published April 9, 2021

Last update October 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

CISA mandated remediation

02CISA Required Action

Apply updates per vendor instructions.

Key dates

03Disclosure timeline

April 9, 2021 CVE published

October 21, 2025 Record updated

External resources

04References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-20022 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html CISA KEV Reference https://nvd.nist.gov/vuln/detail/CVE-2021-20022

Related vulnerabilities

01Description

02CISA Required Action

03Disclosure timeline

04References

05Related CVE