Medium severity5.3NVD Advisory· Published Jul 17, 2020· Updated Jun 17, 2026

CVE-2020-5130

Description

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Affected products

SonicWall/Sonicoscpe-rescue2 versions
6.5.4.4-44n and earlier+ 1 more
- (no CPE)range: 6.5.4.4-44n and earlier
- cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*range: <=6.5.4.4-44n
SonicWall/SonicOS SSLVPN portalllm-fuzzy
Range: <=6.5.4.4-44n

Patches

Vulnerability mechanics

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000