← Back

CVE-2020-5135

nvd nist
Published: Oct 12, 2020Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

Affected (5)

Sonicwall
2 products
Sonicos
Sonicosv
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Sonicwall
Sonicos
Up to 6.0.5.3
Sonicos
From 6.5.0.0 to 6.5.1.11
Sonicos
From 6.5.4.0 to 6.5.4.7
Sonicos
Version 7.0.0.0
Sonicosv
Up to 6.5.4.4

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

Source: PSIRT@sonicwall.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.