CVE-2021-20031
MEDIUM NUCLEISonicOS < 7.0.1-r1262 - Host Header Redirection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-20031. PoCs published by Ramikan. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a Host Header Injection vulnerability in SonicWall SonicOS 7.0, allowing an attacker to spoof the Host header and redirect users to a malicious domain. The PoC shows how modifying the Host header in an HTTP request results in the injected domain appearing in the response.
Description
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
Exploits (1)
This exploit demonstrates a Host Header Injection vulnerability in SonicWall SonicOS 7.0, allowing an attacker to spoof the Host header and redirect users to a malicious domain. The PoC shows how modifying the Host header in an HTTP request results in the injected domain appearing in the response.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N