CVE-2020-5135
critical · 9.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-03-15Remediation due 2022-04-05
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
9.8
CVSS
26.9%
EPSS (exploit prob.)
98th
EPSS percentile
2020-10-12
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sonicos | <= 6.0.5.3 |
| sonicwall | sonicos | >= 6.5.0.0, <= 6.5.1.11 |
| sonicwall | sonicos | >= 6.5.4.0, <= 6.5.4.7 |
| sonicwall | sonicos | 7.0.0.0 |
| sonicwall | sonicosv | <= 6.5.4.4 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-5135