Sonicwall Email Security Appliance 5000 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sonicwall Email Security Appliance 5000 Firmware: 5 record(s), with affected versions and fixes.cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware
CVE-2025-40605
Medium · 5.3
CWE-23 Nov 20, 2025
A Path Traversal vulnerability has been identified in the Email Security appliance allows an...
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
CVE-2025-40604
Critical · 9.8
CWE-494 Nov 20, 2025
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance...
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
CVE-2021-20023
Medium · 4.9
KEV High · 66 Ransomware CWE-22 Apr 20, 2021
SonicWall Email Security Path Traversal Vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
CVE-2021-20022
High · 7.2
KEV High · 69 Ransomware CWE-434 Apr 9, 2021
SonicWall Email Security Unrestricted Upload of File Vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
CVE-2021-20021
Critical · 9.8
KEV Urgent · 83 Public exploit Ransomware CWE-269 Apr 9, 2021
SonicWall Email Security Improper Privilege Management Vulnerability
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.