CVE-2021-20048

HIGH

8.8

CVSS Score

Published: January 7, 2022 at 03:00 AM UTC

Updated: June 17, 2026 at 03:33 AM UTC

59 products affected across 1 vendorSonicOSTz570Tz370

Using SonicOS by SonicWall?

Get instant alerts when new vulnerabilities affect SonicOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 2%

Description

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

SonicOS · SonicWall

95%

v ≤ 5.9.1.13v ≤ 6.0.5.3-94ov ≤ 6.5.1.13-1nv ≤ 6.5.4.8v ≤ 6.5.4.8-89nv ≤ 6.5.4.v_21s-1288v ≤ 7.0.1-5018-R1715v ≤ 7.0.1-5018-r1715v ≤ 7.0.1-5023-1349v ≤ 7.0.1-R146v ≤ 7.0.1-r1456

sonicwall-nsa-2650 (environment) · sonicwall-nsa-2700 (environment) · sonicwall-nsa-3650 (environment) · sonicwall-nsa-3700 (environment) · sonicwall-nsa-4650 (environment) · sonicwall-nsa-4700 (environment) · sonicwall-nsa-5650 (environment) · sonicwall-nsa-6650 (environment) · sonicwall-nsa-6700 (environment) · sonicwall-nsa-9250 (environment) · sonicwall-nsa-9450 (environment) · sonicwall-nsa-9650 (environment) · sonicwall-nssp-12400 (environment) · sonicwall-nssp-12800 (environment) · sonicwall-nssp-13700 (environment) · sonicwall-nssp-15700 (environment) · sonicwall-nsv-10 (environment) · sonicwall-nsv-100 (environment) · sonicwall-nsv-1600 (environment) · sonicwall-nsv-200 (environment) · sonicwall-nsv-25 (environment) · sonicwall-nsv-270 (environment) · sonicwall-nsv-300 (environment) · sonicwall-nsv-400 (environment) · sonicwall-nsv-470 (environment) · sonicwall-nsv-50 (environment) · sonicwall-nsv-800 (environment) · sonicwall-nsv-870 (environment) · sonicwall-soho-250 (environment) · sonicwall-soho-250w (environment) · sonicwall-supermassive-9200 (environment) · sonicwall-supermassive-9400 (environment) · sonicwall-supermassive-9600 (environment) · sonicwall-supermassive-9800 (environment) · sonicwall-supermassive-e10200 (environment) · sonicwall-supermassive-e10400 (environment) · sonicwall-supermassive-e10800 (environment) · sonicwall-tz270 (environment) · sonicwall-tz270w (environment) · sonicwall-tz300 (environment) · sonicwall-tz300p (environment) · sonicwall-tz300w (environment) · sonicwall-tz350 (environment) · sonicwall-tz350w (environment) · sonicwall-tz370 (environment) · sonicwall-tz370w (environment) · sonicwall-tz400 (environment) · sonicwall-tz400w (environment) · sonicwall-tz470 (environment) · sonicwall-tz470w (environment) · sonicwall-tz500 (environment) · sonicwall-tz500w (environment) · sonicwall-tz570 (environment) · sonicwall-tz570p (environment) · sonicwall-tz570w (environment) · sonicwall-tz600 (environment) · sonicwall-tz600p (environment) · sonicwall-tz670 (environment)

Nsa 2650 · SonicWalldevice

80%

All versions

Nsa 2700 · SonicWalldevice

80%

All versions

Nsa 3650 · SonicWalldevice

80%

All versions

Nsa 3700 · SonicWalldevice

80%

All versions