VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 17, 2020· Updated Jun 17, 2026

CVE-2020-5130

CVE-2020-5130

Description

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Affected products

3
  • SonicWall/Sonicos2 versions
    cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*range: <=6.5.4.4-44n
    • (no CPE)range: 6.5.4.4-44n and earlier
  • SonicWall/SonicOS SSLVPN portalllm-fuzzy
    Range: <=6.5.4.4-44n

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.