« Volver al listado

CVE-2021-20024

Estado: ModificadaAlta (8.1)—

Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sonicwall — Switch

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-20024",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 7.8,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT@sonicwall.com",
      "affectedData": [
        {
          "vendor": "SonicWall",
          "product": "SonicWall Switch",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0.5-16 and earlier"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-07-09T22:15:08.320",
  "references": [
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT@sonicwall.com"
    },
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0011",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "PSIRT@sonicwall.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de lectura  fuera de límites en SonicWall Switch cuando se maneja el protocolo LLDP permite a un atacante causar una inestabilidad del sistema o leer potencialmente información confidencial de las ubicaciones de memoria"
    }
  ],
  "lastModified": "2026-06-17T03:33:09.943",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:switch:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "076786F3-94BB-447A-B66C-07B89A2F1E58",
              "versionEndIncluding": "1.0.0.5-16"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC1B14D9-15C7-4490-9A2C-4FD9462CF465"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F93E9E20-D465-490B-B2E0-A92670684ECE"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A756CC39-180C-4293-8A45-7C55DC88639B"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "72DF3E57-4840-4327-9796-D92F663FFF4E"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "04079B4A-8CF2-4D17-B9AB-CF9A84692CAD"
            },
            {
              "criteria": "cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "49B54692-77FD-411F-90F4-AAE31E48D5B8"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "PSIRT@sonicwall.com"
}