Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-20031

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.1, indicating it can be exploited remotely over the network with relatively low complexity though user interaction is required and does not require pre-existing privileges . The vulnerability impacts limited data confidentiality, limited integrity, for affected systems. Impacting 59 products from sonicwall, from sonicwall, from sonicwall and 56 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2021-10-12T23:15:07.727

Last Modified

2024-11-21T05:45:49.147

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Secondary
CWE-601
Type: Primary
CWE-601

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	sonicwall	sonicos	≤ 7.0.1-r1262	Yes
Hardware	sonicwall	nsa_2650	-	No
Hardware	sonicwall	nsa_2700	-	No
Hardware	sonicwall	nsa_3650	-	No
Hardware	sonicwall	nsa_3700	-	No
Hardware	sonicwall	nsa_4650	-	No
Hardware	sonicwall	nsa_4700	-	No
Hardware	sonicwall	nsa_5650	-	No
Hardware	sonicwall	nsa_6650	-	No
Hardware	sonicwall	nsa_6700	-	No
Hardware	sonicwall	nsa_9250	-	No
Hardware	sonicwall	nsa_9450	-	No
Hardware	sonicwall	nsa_9650	-	No
Hardware	sonicwall	tz270	-	No
Hardware	sonicwall	tz270w	-	No
Hardware	sonicwall	tz300	-	No
Hardware	sonicwall	tz300p	-	No
Hardware	sonicwall	tz300w	-	No
Hardware	sonicwall	tz350	-	No
Hardware	sonicwall	tz350w	-	No
Hardware	sonicwall	tz370	-	No
Hardware	sonicwall	tz370w	-	No
Hardware	sonicwall	tz400	-	No
Hardware	sonicwall	tz400w	-	No
Hardware	sonicwall	tz470	-	No
Hardware	sonicwall	tz470w	-	No
Hardware	sonicwall	tz500	-	No
Hardware	sonicwall	tz500w	-	No
Hardware	sonicwall	tz570	-	No
Hardware	sonicwall	tz570p	-	No
Hardware	sonicwall	tz570w	-	No
Hardware	sonicwall	tz600	-	No
Hardware	sonicwall	tz600p	-	No
Hardware	sonicwall	tz670	-	No
Operating System	sonicwall	sonicos	≤ 7.0.1-r1283	Yes
Hardware	sonicwall	nsv_10	-	No
Hardware	sonicwall	nsv_100	-	No
Hardware	sonicwall	nsv_1600	-	No
Hardware	sonicwall	nsv_200	-	No
Hardware	sonicwall	nsv_25	-	No
Hardware	sonicwall	nsv_270	-	No
Hardware	sonicwall	nsv_300	-	No
Hardware	sonicwall	nsv_400	-	No
Hardware	sonicwall	nsv_470	-	No
Hardware	sonicwall	nsv_50	-	No
Hardware	sonicwall	nsv_800	-	No
Hardware	sonicwall	nsv_870	-	No
Operating System	sonicwall	sonicos	≤ 7.0.1-r579	Yes
Hardware	sonicwall	nssp_12400	-	No
Hardware	sonicwall	nssp_12800	-	No
Hardware	sonicwall	nssp_13700	-	No
Hardware	sonicwall	nssp_15700	-	No
Operating System	sonicwall	sonicos	≤ 6.5.4.7	Yes
Hardware	sonicwall	nsa_2650	-	No
Hardware	sonicwall	nsa_2700	-	No
Hardware	sonicwall	nsa_3650	-	No
Hardware	sonicwall	nsa_3700	-	No
Hardware	sonicwall	nsa_4650	-	No
Hardware	sonicwall	nsa_4700	-	No
Hardware	sonicwall	nsa_5650	-	No
Hardware	sonicwall	nsa_6650	-	No
Hardware	sonicwall	nsa_6700	-	No
Hardware	sonicwall	nsa_9250	-	No
Hardware	sonicwall	nsa_9450	-	No
Hardware	sonicwall	nsa_9650	-	No
Hardware	sonicwall	soho_250w	-	No
Hardware	sonicwall	supermassive_9200	-	No
Hardware	sonicwall	supermassive_9400	-	No
Hardware	sonicwall	supermassive_9600	-	No
Hardware	sonicwall	supermassive_9800	-	No
Hardware	sonicwall	tz270	-	No
Hardware	sonicwall	tz270w	-	No
Hardware	sonicwall	tz300	-	No
Hardware	sonicwall	tz300p	-	No
Hardware	sonicwall	tz300w	-	No
Hardware	sonicwall	tz350	-	No
Hardware	sonicwall	tz350w	-	No
Hardware	sonicwall	tz370	-	No
Hardware	sonicwall	tz370w	-	No
Hardware	sonicwall	tz400	-	No
Hardware	sonicwall	tz400w	-	No
Hardware	sonicwall	tz470	-	No
Hardware	sonicwall	tz470w	-	No
Hardware	sonicwall	tz500	-	No
Hardware	sonicwall	tz500w	-	No
Hardware	sonicwall	tz570	-	No
Hardware	sonicwall	tz570p	-	No
Hardware	sonicwall	tz570w	-	No
Hardware	sonicwall	tz600	-	No
Hardware	sonicwall	tz600p	-	No
Hardware	sonicwall	tz670	-	No
Operating System	sonicwall	sonicos	≤ 6.5.1.12	Yes
Hardware	sonicwall	nssp_12400	-	No
Hardware	sonicwall	nssp_12800	-	No
Hardware	sonicwall	supermassive_9800	-	No
Operating System	sonicwall	sonicos	≤ 6.0.5.3-94o	Yes
Hardware	sonicwall	supermassive_e10200	-	No
Hardware	sonicwall	supermassive_e10400	-	No
Hardware	sonicwall	supermassive_e10800	-	No
Operating System	sonicwall	sonicos	≤ 5.9.1.13	Yes
Hardware	sonicwall	nsa_2650	-	No
Hardware	sonicwall	nsa_2700	-	No
Hardware	sonicwall	nsa_3650	-	No
Hardware	sonicwall	nsa_3700	-	No
Hardware	sonicwall	nsa_4650	-	No
Hardware	sonicwall	nsa_4700	-	No
Hardware	sonicwall	nsa_5650	-	No
Hardware	sonicwall	nsa_6650	-	No
Hardware	sonicwall	nsa_6700	-	No
Hardware	sonicwall	nsa_9250	-	No
Hardware	sonicwall	nsa_9450	-	No
Hardware	sonicwall	nsa_9650	-	No
Hardware	sonicwall	soho_250	-	No
Hardware	sonicwall	soho_250w	-	No
Hardware	sonicwall	tz270	-	No
Hardware	sonicwall	tz270w	-	No
Hardware	sonicwall	tz300	-	No
Hardware	sonicwall	tz300p	-	No
Hardware	sonicwall	tz300w	-	No
Hardware	sonicwall	tz350	-	No
Hardware	sonicwall	tz350w	-	No
Hardware	sonicwall	tz370	-	No
Hardware	sonicwall	tz370w	-	No
Hardware	sonicwall	tz400	-	No
Hardware	sonicwall	tz400w	-	No
Hardware	sonicwall	tz470	-	No
Hardware	sonicwall	tz470w	-	No
Hardware	sonicwall	tz500	-	No
Hardware	sonicwall	tz500w	-	No

References

http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html Exploit, Third Party Advisory, VDB Entry ([email protected])
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019 Vendor Advisory ([email protected])
http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For sonicwall's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.