CVE-2020-5140
First published: Mon Oct 12 2020(Updated: )
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Credit: PSIRT@sonicwall.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SonicWall SonicOS | <=5.9.1.13 | |
| SonicWall SonicOS | >=6.0.0.0<=6.0.5.3 | |
| SonicWall SonicOS | >=6.5.0.0<=6.5.1.11 | |
| SonicWall SonicOS | >=6.5.4.0<=6.5.4.7 | |
| SonicWall SonicOS | =7.0.0.0 | |
| Sonicwall Sonicosv | <=6.5.4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this SonicOS vulnerability?
The vulnerability ID of this SonicOS vulnerability is CVE-2020-5140.
What is the severity of CVE-2020-5140?
The severity of CVE-2020-5140 is high with a score of 7.5.
How does CVE-2020-5140 affect SonicOS?
CVE-2020-5140 allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak.
Which versions of SonicOS are affected by CVE-2020-5140?
SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.4.0, Gen 7 version 7.0.0.0, and Sonicwall Sonicosv version up to and including 6.5.4.4 are affected by CVE-2020-5140.
How can I fix the CVE-2020-5140 vulnerability?
To fix the CVE-2020-5140 vulnerability, SonicWall SonicOS users should update their firmware to the latest available version.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/sonicwall
- canonical/sonicwall sonicos
- version/sonicwall sonicos/5.9.1.13
- version/sonicwall sonicos/6.0.0.0
- version/sonicwall sonicos/6.0.5.3
- version/sonicwall sonicos/6.5.0.0
- version/sonicwall sonicos/6.5.1.11
- version/sonicwall sonicos/6.5.4.0
- version/sonicwall sonicos/6.5.4.7
- version/sonicwall sonicos/7.0.0.0
- canonical/sonicwall sonicosv
- version/sonicwall sonicosv/6.5.4.4