CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability
First published: Mon Oct 12 2020(Updated: )
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
Credit: PSIRT@sonicwall.com PSIRT@sonicwall.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SonicWall SonicOS | <=6.0.5.3 | |
| SonicWall SonicOS | >=6.5.0.0<=6.5.1.11 | |
| SonicWall SonicOS | >=6.5.4.0<=6.5.4.7 | |
| SonicWall SonicOS | =7.0.0.0 | |
| Sonicwall Sonicosv | <=6.5.4.4 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SonicWall SonicOS vulnerability?
The vulnerability ID for this SonicWall SonicOS vulnerability is CVE-2020-5135.
What is the severity of CVE-2020-5135?
The severity of CVE-2020-5135 is critical.
How does the SonicWall SonicOS buffer overflow vulnerability affect the firewall?
The buffer overflow vulnerability in SonicWall SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Which versions of SonicOS are affected by CVE-2020-5135?
SonicOS Gen 6 versions 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v, and Gen 7 version 7.0.0.0 are affected by CVE-2020-5135.
Is there a fix available for CVE-2020-5135?
Yes, SonicWall has released fixes for the affected versions. Please refer to the vendor's advisory for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/title
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/event
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/sonicwall
- canonical/sonicwall sonicos
- version/sonicwall sonicos/6.0.5.3
- version/sonicwall sonicos/6.5.0.0
- version/sonicwall sonicos/6.5.1.11
- version/sonicwall sonicos/6.5.4.0
- version/sonicwall sonicos/6.5.4.7
- version/sonicwall sonicos/7.0.0.0
- canonical/sonicwall sonicosv
- version/sonicwall sonicosv/6.5.4.4