Web Scanning SonicWall for CVE-2021-20016 - Update
Essential information
- Published
- 15/05/2025 11:58
- Modified
- 21/05/2025 20:29
- Tags
- 2025-05-15 CVE-2021-20016 exploitation network-security scanning sonicwall vulnerability
- Related entities
- 1 vulnerabilities (cve), 6 observables, 5 techniques (mitre)
Description
There has been a significant increase in scanning activity targeting SonicWall devices, specifically looking for CVE-2021-20016 vulnerability. The activity has grown tenfold over the past 14 days, with multiple sources reporting probes related to two specific URLs. The most active IP addresses originate from the 141.98.80.0/24 subnet. The diary provides a list of indicator IP addresses involved in the scanning activity. This surge in scanning efforts highlights the ongoing threat landscape surrounding the SonicWall vulnerability, emphasizing the importance of patching and monitoring for potential exploitation attempts.