What’s Vulnerable › Vulnerabilities

CVE-2021-20031

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-12 · updated 2026-06-17
• Weakness: CWE-601

Description

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

Affected products

• SonicWall SonicOS: through 7.0.1-r1262; through 7.0.1-r1283; through 7.0.1-r579; through 6.5.4.7; through 6.5.1.12; through 6.0.5.3-94o

References

• http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019
• http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019

Get alerted when CVE-2021-20031 or the next vulnerability affects your stack