CVE-2020-5136: Buffer Overflow
First published: Mon Oct 12 2020(Updated: )
A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
Credit: PSIRT@sonicwall.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SonicWall SonicOS | <=5.9.1.13 | |
| SonicWall SonicOS | >=6.0.0.0<=6.0.5.3 | |
| SonicWall SonicOS | >=6.5.0.0<=6.5.1.11 | |
| SonicWall SonicOS | >=6.5.4.0<=6.5.4.7 | |
| SonicWall SonicOS | =7.0.0.0 | |
| Sonicwall Sonicosv | <=6.5.4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this SonicOS vulnerability?
The vulnerability ID for this SonicOS vulnerability is CVE-2020-5136.
What is the severity of CVE-2020-5136?
The severity of CVE-2020-5136 is medium with a severity value of 6.5.
Which versions of SonicOS are affected by CVE-2020-5136?
SonicOS Gen 5 versions 5.9.1.7 and 5.9.1.13, Gen 6 versions 6.5.4.7, 6.5.1.12, and 6.0.5.3 are affected by CVE-2020-5136.
What is the impact of CVE-2020-5136?
CVE-2020-5136 allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, resulting in a firewall crash.
Is there a fix available for CVE-2020-5136?
Yes, SonicWall has released patches to address CVE-2020-5136. Please refer to the official SonicWall advisory for more information and to download the necessary updates.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/sonicwall
- canonical/sonicwall sonicos
- version/sonicwall sonicos/5.9.1.13
- version/sonicwall sonicos/6.0.0.0
- version/sonicwall sonicos/6.0.5.3
- version/sonicwall sonicos/6.5.0.0
- version/sonicwall sonicos/6.5.1.11
- version/sonicwall sonicos/6.5.4.0
- version/sonicwall sonicos/6.5.4.7
- version/sonicwall sonicos/7.0.0.0
- canonical/sonicwall sonicosv
- version/sonicwall sonicosv/6.5.4.4