CVE-2021-20019: SonicWall SonicOS

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.

Affected products

• SonicWall SonicOS: from 7.0.0, before 7.0.0.376 (fixed in 7.0.0.376); from 7.0.1, before 7.0.1-r1036 (fixed in 7.0.1-r1036); version 6.0.5.3-94o only; version 6.5.1.12-3n only; version 6.5.4.7-83n only
• SonicWall Sonicosv: version 6.5.4.4-44v-21-955 only

Published 2021-06-23. Last modified 2026-06-17.