Detections
Analytics
CVE-2021-20019
high
Description
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.
From the Tenable Blog
CVE-2021-20019: SonicWall Fixes Incomplete Patch for CVE-2020-5135
Published: 2021-06-23
SonicWall issues a new advisory and CVE identifier to address an incomplete fix for CVE-2020-5135.
References
https://www.tenable.com/blog/cve-2021-20019-sonicwall-fixes-incomplete-patch-for-cve-2020-5135
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006