CVE-2021-20031

EUVD-2021-7494
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
sonicwallsonicos
𝑥
≤ 7.0.1-r1262
sonicwallsonicos
𝑥
≤ 7.0.1-r1283
sonicwallsonicos
𝑥
≤ 7.0.1-r579
sonicwallsonicos
𝑥
≤ 6.5.4.7
sonicwallsonicos
𝑥
≤ 6.5.1.12
sonicwallsonicos
𝑥
≤ 6.0.5.3-94o
sonicwallsonicos
𝑥
≤ 5.9.1.13
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019
http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019