CVE-2020-5136: Buffer Overflow
A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SonicOS vulnerability?
The vulnerability ID for this SonicOS vulnerability is CVE-2020-5136.
What is the severity of CVE-2020-5136?
The severity of CVE-2020-5136 is medium with a severity value of 6.5.
Which versions of SonicOS are affected by CVE-2020-5136?
SonicOS Gen 5 versions 5.9.1.7 and 5.9.1.13, Gen 6 versions 6.5.4.7, 6.5.1.12, and 6.0.5.3 are affected by CVE-2020-5136.
What is the impact of CVE-2020-5136?
CVE-2020-5136 allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, resulting in a firewall crash.
Is there a fix available for CVE-2020-5136?
Yes, SonicWall has released patches to address CVE-2020-5136. Please refer to the official SonicWall advisory for more information and to download the necessary updates.