Riskcovery

CVE-2021-20019

State
Published
Severity
Not scored
Published
Jun 23, 2021
Updated
Aug 3, 2024
Reserved
Dec 17, 2020

Read the record on cve.org

Description

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

ProductVersions
SonicOSSonicWall
  • SonicOS - 6.5.4.7-83nAffected
  • SonicOSv - 6.5.4.4-44v-21-955Affected
  • SonicOS - 6.5.1.12-3nAffected
  • SonicOS - 6.0.5.3-94oAffected
  • SonicOS - 7.0.0-R713 and earlierAffected
  • SonicOS - 7.0.1-R1036 and earlierAffected
  • SonicOS - 7.0.0.375 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.