CVE-2021-20025

Name of the Vulnerable Software and Affected Versions: SonicWall Email Security Virtual Appliance versions 10.0.9 and earlier

Description: The issue concerns a default username and password used during initial setup. An attacker could exploit this temporary user account to access the Virtual Appliance remotely, but only when the device is freshly installed and not connected to Mysonicwall.

Recommendations: For SonicWall Email Security Virtual Appliance versions 10.0.9 and earlier, consider changing the default username and password immediately after setup to prevent potential exploitation. As a temporary workaround, ensure the device is connected to Mysonicwall as soon as possible after installation to mitigate the risk.