CVE-2020-5140: High severity sonicwall sonicos vulnerability
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this SonicOS vulnerability?
The vulnerability ID of this SonicOS vulnerability is CVE-2020-5140.
What is the severity of CVE-2020-5140?
The severity of CVE-2020-5140 is high with a score of 7.5.
How does CVE-2020-5140 affect SonicOS?
CVE-2020-5140 allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak.
Which versions of SonicOS are affected by CVE-2020-5140?
SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.4.0, Gen 7 version 7.0.0.0, and Sonicwall Sonicosv version up to and including 6.5.4.4 are affected by CVE-2020-5140.
How can I fix the CVE-2020-5140 vulnerability?
To fix the CVE-2020-5140 vulnerability, SonicWall SonicOS users should update their firmware to the latest available version.