FAIL › dossier
SonicWall Email Security
PRODUCT· dossier confidence 90%
SonicWall Email Security is an email security product that suffered a severe security incident in November 2021, where three critical vulnerabilities were actively exploited by attackers to deploy ransomware and escalate privileges.
PROFILE
CategoryEmail SecurityWhat they doSonicWall Email Security is an email security product designed to protect organizations from threats like ransomware and privilege escalation.
SECURITY POSTURE
The product suffered a critical cluster of vulnerabilities in November 2021 that were actively exploited in ransomware attacks, indicating a severe lapse in patching and threat detection prior to the incidents.
Notable failures
- CVE-2021-20021: Privilege escalation via crafted HTTP requests
- CVE-2021-20022: Remote code execution allowing malicious file uploads
- CVE-2021-20023: Path traversal enabling unauthorized file reads
Patterns: critical vulnerabilities exploited in ransomware attacks; lack of timely patching for high-severity flaws
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2021-11-03 | CVE-2021-20021 | critical | SonicWall Email Security allowed attackers to create administrative accounts via a crafted HTTP request, enabling privilege escalation and ransomware attacks. |
| 2021-11-03 | CVE-2021-20022 | critical | SonicWall Email Security allowed authenticated attackers to upload malicious files, exploited in the wild with ransomware connections. |
| 2021-11-03 | CVE-2021-20023 | critical | SonicWall Email Security allowed authenticated attackers to read files via a path traversal vulnerability, actively exploited in ransomware attacks. |
Open questions: Who owns SonicWall? · What is the headquarters location of SonicWall? · What is the current size of SonicWall? · What is the official website of SonicWall?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-31 04:07:29.180884+00:00