CVE-2020-5135

State: Published
Severity: 9.8 Critical
Published: Oct 12, 2020
Updated: Oct 21, 2025
Reserved: Dec 31, 2019

Description

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input

Affected Products

Product	Versions
SonicOSSonicWall	SonicOS 6.5.4.7-79n and earlierAffected SonicOS 6.5.1.11-4n and earlierAffected SonicOS 6.0.5.3-93o and earlierAffected SonicOSv 6.5.4.4-44v-21-794 and earlierAffected SonicOS 7.0.0.0-1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.