CVE-2020-5135

🗓️ 12 Oct 2020 10:40:28Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1486 Views

Buffer overflow vuln in SonicOS allows remote attacker to cause DoS and potentially execute arbitrary code

Reporter	Title	Published	Views	Family All 130
ATTACKERKB	CVE-2020-5135	12 Oct 202000:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
BDU FSTEC	The vulnerability of the SonicOS operating system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.	17 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicOS operating systems lies in the lack of a mechanism to check the size of copied data. This allows attackers to execute arbitrary code or cause service failures.	17 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-5135	14 Oct 202011:19	–	circl
CISA KEV Catalog	SonicWall SonicOS Buffer Overflow Vulnerability	15 Mar 202200:00	–	cisa_kev
CISA	CISA Adds 15 Known Exploited Vulnerability to Catalog	15 Mar 202200:00	–	cisa
CNVD	SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28764)	13 Oct 202000:00	–	cnvd
Cvelist	CVE-2020-5135	12 Oct 202010:40	–	cvelist
NCSC	Vulnerability fixed in Sonicwall	15 Oct 202000:00	–	ncsc

NVD

Vulners

Node

sonicwall sonicosRange≤6.0.5.3

sonicwall sonicosRange6.5.0.0–6.5.1.11

sonicwall sonicosRange6.5.4.0–6.5.4.7

sonicwall sonicosMatch7.0.0.0

sonicwall sonicosvRange≤6.5.4.4

[
  {
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SonicOS 6.5.4.7-79n and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS 6.5.1.11-4n and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS 6.0.5.3-93o and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOSv 6.5.4.4-44v-21-794 and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS 7.0.0.0-1"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

31 Oct 2025 14:40Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.26869

SSVC