CVE-2021-20027 : A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a D

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.

Published 2021-06-14 23:15:07

Updated 2021-09-13 10:39:23

Source SonicWALL, Inc.

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Products affected by CVE-2021-20027

Sonicwall » Sonicos
Versions up to, including, (<=) 6.0.5.3-94o
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Supermassive E10200 » Version: N/A
When used together with: Sonicwall » Supermassive E10400 » Version: N/A
When used together with: Sonicwall » Supermassive E10800 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 7.0.1-r514
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nssp 12400 » Version: N/A
When used together with: Sonicwall » Nssp 12800 » Version: N/A
When used together with: Sonicwall » Nssp 13700 » Version: N/A
When used together with: Sonicwall » Nssp 15700 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 7.0.1-r1262
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nsa 2650 » Version: N/A
When used together with: Sonicwall » Nsa 2700 » Version: N/A
When used together with: Sonicwall » Nsa 3650 » Version: N/A
When used together with: Sonicwall » Nsa 3700 » Version: N/A
When used together with: Sonicwall » Nsa 4650 » Version: N/A
When used together with: Sonicwall » Nsa 4700 » Version: N/A
When used together with: Sonicwall » Nsa 5650 » Version: N/A
When used together with: Sonicwall » Nsa 6650 » Version: N/A
When used together with: Sonicwall » Nsa 6700 » Version: N/A
When used together with: Sonicwall » Nsa 9250 » Version: N/A
When used together with: Sonicwall » Nsa 9450 » Version: N/A
When used together with: Sonicwall » Nsa 9650 » Version: N/A
When used together with: Sonicwall » Tz270 » Version: N/A
When used together with: Sonicwall » Tz270w » Version: N/A
When used together with: Sonicwall » Tz300 » Version: N/A
When used together with: Sonicwall » Tz300p » Version: N/A
When used together with: Sonicwall » Tz300w » Version: N/A
When used together with: Sonicwall » Tz350 » Version: N/A
When used together with: Sonicwall » Tz350w » Version: N/A
When used together with: Sonicwall » Tz370 » Version: N/A
When used together with: Sonicwall » Tz370w » Version: N/A
When used together with: Sonicwall » Tz400 » Version: N/A
When used together with: Sonicwall » Tz400w » Version: N/A
When used together with: Sonicwall » Tz470 » Version: N/A
When used together with: Sonicwall » Tz470w » Version: N/A
When used together with: Sonicwall » Tz500 » Version: N/A
When used together with: Sonicwall » Tz500w » Version: N/A
When used together with: Sonicwall » Tz570 » Version: N/A
When used together with: Sonicwall » Tz570p » Version: N/A
When used together with: Sonicwall » Tz570w » Version: N/A
When used together with: Sonicwall » Tz600 » Version: N/A
When used together with: Sonicwall » Tz600p » Version: N/A
When used together with: Sonicwall » Tz670 » Version: N/A
Sonicwall » Sonicos
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nsv 10 » Version: N/A
When used together with: Sonicwall » Nsv 100 » Version: N/A
When used together with: Sonicwall » Nsv 1600 » Version: N/A
When used together with: Sonicwall » Nsv 200 » Version: N/A
When used together with: Sonicwall » Nsv 25 » Version: N/A
When used together with: Sonicwall » Nsv 270 » Version: N/A
When used together with: Sonicwall » Nsv 300 » Version: N/A
When used together with: Sonicwall » Nsv 400 » Version: N/A
When used together with: Sonicwall » Nsv 470 » Version: N/A
When used together with: Sonicwall » Nsv 50 » Version: N/A
When used together with: Sonicwall » Nsv 800 » Version: N/A
When used together with: Sonicwall » Nsv 870 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 6.5.1.12
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nssp 12400 » Version: N/A
When used together with: Sonicwall » Nssp 12800 » Version: N/A
When used together with: Sonicwall » Supermassive 9800 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 7.0.1-r.1219
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nsv 10 » Version: N/A
When used together with: Sonicwall » Nsv 100 » Version: N/A
When used together with: Sonicwall » Nsv 1600 » Version: N/A
When used together with: Sonicwall » Nsv 200 » Version: N/A
When used together with: Sonicwall » Nsv 25 » Version: N/A
When used together with: Sonicwall » Nsv 270 » Version: N/A
When used together with: Sonicwall » Nsv 300 » Version: N/A
When used together with: Sonicwall » Nsv 400 » Version: N/A
When used together with: Sonicwall » Nsv 470 » Version: N/A
When used together with: Sonicwall » Nsv 50 » Version: N/A
When used together with: Sonicwall » Nsv 800 » Version: N/A
When used together with: Sonicwall » Nsv 870 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 6.5.4.7
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nsa 2650 » Version: N/A
When used together with: Sonicwall » Nsa 2700 » Version: N/A
When used together with: Sonicwall » Nsa 3650 » Version: N/A
When used together with: Sonicwall » Nsa 3700 » Version: N/A
When used together with: Sonicwall » Nsa 4650 » Version: N/A
When used together with: Sonicwall » Nsa 4700 » Version: N/A
When used together with: Sonicwall » Nsa 5650 » Version: N/A
When used together with: Sonicwall » Nsa 6650 » Version: N/A
When used together with: Sonicwall » Nsa 6700 » Version: N/A
When used together with: Sonicwall » Nsa 9250 » Version: N/A
When used together with: Sonicwall » Nsa 9450 » Version: N/A
When used together with: Sonicwall » Nsa 9650 » Version: N/A
When used together with: Sonicwall » Soho 250 » Version: N/A
When used together with: Sonicwall » Soho 250w » Version: N/A
When used together with: Sonicwall » Supermassive 9200 » Version: N/A
When used together with: Sonicwall » Supermassive 9400 » Version: N/A
When used together with: Sonicwall » Supermassive 9600 » Version: N/A
When used together with: Sonicwall » Tz270 » Version: N/A
When used together with: Sonicwall » Tz270w » Version: N/A
When used together with: Sonicwall » Tz300 » Version: N/A
When used together with: Sonicwall » Tz300p » Version: N/A
When used together with: Sonicwall » Tz300w » Version: N/A
When used together with: Sonicwall » Tz350 » Version: N/A
When used together with: Sonicwall » Tz350w » Version: N/A
When used together with: Sonicwall » Tz370 » Version: N/A
When used together with: Sonicwall » Tz370w » Version: N/A
When used together with: Sonicwall » Tz400 » Version: N/A
When used together with: Sonicwall » Tz400w » Version: N/A
When used together with: Sonicwall » Tz470 » Version: N/A
When used together with: Sonicwall » Tz470w » Version: N/A
When used together with: Sonicwall » Tz500 » Version: N/A
When used together with: Sonicwall » Tz500w » Version: N/A
When used together with: Sonicwall » Tz570 » Version: N/A
When used together with: Sonicwall » Tz570p » Version: N/A
When used together with: Sonicwall » Tz570w » Version: N/A
When used together with: Sonicwall » Tz600 » Version: N/A
When used together with: Sonicwall » Tz600p » Version: N/A
When used together with: Sonicwall » Tz670 » Version: N/A
Sonicwall » Sonicos
Versions up to, including, (<=) 5.9.1.13
cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sonicwall » Nsa 2650 » Version: N/A
When used together with: Sonicwall » Nsa 2700 » Version: N/A
When used together with: Sonicwall » Nsa 3650 » Version: N/A
When used together with: Sonicwall » Nsa 3700 » Version: N/A
When used together with: Sonicwall » Nsa 4650 » Version: N/A
When used together with: Sonicwall » Nsa 4700 » Version: N/A
When used together with: Sonicwall » Nsa 5650 » Version: N/A
When used together with: Sonicwall » Nsa 6650 » Version: N/A
When used together with: Sonicwall » Nsa 6700 » Version: N/A
When used together with: Sonicwall » Nsa 9250 » Version: N/A
When used together with: Sonicwall » Nsa 9450 » Version: N/A
When used together with: Sonicwall » Nsa 9650 » Version: N/A
When used together with: Sonicwall » Soho 250 » Version: N/A
When used together with: Sonicwall » Soho 250w » Version: N/A
When used together with: Sonicwall » Tz270 » Version: N/A
When used together with: Sonicwall » Tz270w » Version: N/A
When used together with: Sonicwall » Tz300 » Version: N/A
When used together with: Sonicwall » Tz300p » Version: N/A
When used together with: Sonicwall » Tz300w » Version: N/A
When used together with: Sonicwall » Tz350 » Version: N/A
When used together with: Sonicwall » Tz350w » Version: N/A
When used together with: Sonicwall » Tz370 » Version: N/A
When used together with: Sonicwall » Tz370w » Version: N/A
When used together with: Sonicwall » Tz400 » Version: N/A
When used together with: Sonicwall » Tz400w » Version: N/A
When used together with: Sonicwall » Tz470 » Version: N/A
When used together with: Sonicwall » Tz470w » Version: N/A
When used together with: Sonicwall » Tz500 » Version: N/A
When used together with: Sonicwall » Tz500w » Version: N/A
When used together with: Sonicwall » Tz570 » Version: N/A
When used together with: Sonicwall » Tz570p » Version: N/A
When used together with: Sonicwall » Tz570w » Version: N/A
When used together with: Sonicwall » Tz600 » Version: N/A
When used together with: Sonicwall » Tz600p » Version: N/A
When used together with: Sonicwall » Tz670 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-20027

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 58 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-20027

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-20027

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Assigned by:
- nvd@nist.gov (Primary)
- PSIRT@sonicwall.com (Secondary)

References for CVE-2021-20027

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016

Security Advisory
Mitigation;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-20027

Products affected by CVE-2021-20027

Exploit prediction scoring system (EPSS) score for CVE-2021-20027

CVSS scores for CVE-2021-20027

CWE ids for CVE-2021-20027

References for CVE-2021-20027