CVE-2020-5135

CVE-2020-5135 is a buffer overflow in SonicOS affecting multiple releases (Gen 6: 6.5.4.7, 6.5.1.12, 6.0.5.3; SonicOSv: 6.5.4.v; Gen 7: 7.0.0.0). The vulnerability allows a remote attacker to cause Denial of Service and potentially execute arbitrary code by sending a malicious request to affected...

CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

CVE-2022-22274

CVE-2022-22274 is a stack-based buffer overflow in SonicWall’s SonicOS web interface triggered by an HTTP request. The vulnerability allows a remote, unauthenticated attacker to cause Denial of Service and potentially execute code on affected devices. Public sources consistently tie this to the S...

CVE-2019-7479

CVE-2019-7479 affects SonicOS and SonicOSv: authenticated read-only administrators can elevate privileges to configuration mode. Affected versions include SonicOS Gen 5 up to 5.9.1.12-4o and earlier; Gen 6 up to versions such as 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1....

CVE-2021-20019

CVE-2021-20019 describes a memory disclosure in SonicOS HTTP server: an unauthenticated, crafted HTTP request may cause the server to leak partial memory, potentially exposing sensitive data. Reported by multiple sources to affect SonicOS generations (SonicOS/SonicWall devices); some entries list...

CVE-2020-5142

CVE-2020-5142 is a stored XSS vulnerability in the SonicOS SSLVPN web interface. It affects SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, and Gen 7 (SonicOS 7.0.0.0). An unauthenticated remote attacker can inject and potentially execute arbitrary JavaScr...

CVE-2020-5143

SonicOS SSLVPN login page vulnerability CVE-2020-5143 allows remote unauthenticated username enumeration based on server responses. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (SonicOS 7.0.0.0). Root cause: username enumeration through ...

CVE-2020-5137

SonicOS contains a buffer overflow allowing a remote unauthenticated attacker to cause DoS on the SSLVPN service and crash the firewall. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (7.0.0.0). Root cause: buffer overflow in SSLVPN handli...

CVE-2019-7475

CVE-2019-7475 affects SonicWall SonicOS and SonicOSv with management enabled, permitting an unprivileged user to access advanced routing services. Affected: SonicOS Gen 5 (up to 5.9.1.10), Gen 6 (up to 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o) and SonicOSv (6.5.0...

CVE-2020-5134

CVE-2020-5134 affects SonicOS Gen 6 (versions 6.5.1.12 and 6.0.5.3), SonicOSv 6.5.4.v, and Gen 7 (7.0.0.0). The vulnerability allows an authenticated attacker to trigger an out-of-bounds invalid file reference, leading to a firewall crash. This is documented across multiple sources (e.g., SonicWa...

CVE-2020-5136

CVE-2020-5136 is a buffer overflow in SonicOS that can be exploited by an authenticated attacker to cause a Denial of Service and a firewall crash affecting SSL-VPN and the virtual assist portal. Affected platforms include SonicOS Gen 5 (versions 5.9.1.7, 5.9.1.13), Gen 6 (versions 6.5.4.7, 6.5.1...

CVE-2020-5140

SonicOS SSLVPN memory address leakage vulnerability (CVE-2020-5140) allows a remote unauthenticated attacker to trigger a Denial of Service by sending a malicious HTTP request. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (SonicOS 7.0.0....

CVE-2019-7474

CVE-2019-7474 is a SonicWall SonicOS/SonicOSv vulnerability where an authenticated read-only admin can cause the firewall to reach an unstable state by downloading a certificate with a specific extension. Affected are SonicOS Gen 5 up to 5.9.1.10, Gen 6 including 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3....

CVE-2019-7477

CVE-2019-7477 is a vulnerability in SonicWall SonicOS and SonicOSv TLS CBC cipher suites that allows remote attackers to obtain sensitive plaintext data when CBC ciphers are enabled. Affected products and versions include SonicOS Gen 5 (5.9.1.10 and earlier) and Gen 6 (6.2.7.3, 6.5.1.3, 6.5.2.2, ...

CVE-2020-5138

CVE-2020-5138 describes a heap overflow in SonicOS SSLVPN that allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) and a SonicOS crash. Affected versions include SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, and Gen 7 (SonicOS 7....

CVE-2020-5139

CVE-2020-5139 is a vulnerability in SonicOS SSLVPN that enables a remote unauthenticated attacker to cause a Denial of Service (DoS) by releasing an invalid pointer, resulting in a firewall crash. Affected products and versions documented in multiple sources include SonicOS Gen 5 (5.9.1.7, 5.9.1....

CVE-2020-5141

The CVE-2020-5141 entry covers SonicOS SSLVPN: a remote, unauthenticated attacker can brute-force the Virtual Assist ticket ID in the SSLVPN service. Affected software includes SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, and Gen 7 (SonicOS 7.0.0.0). Th...

CVE-2020-5133

CVE-2020-5133 describes a remotely exploitable buffer overflow in SonicOS that allows an unauthenticated attacker to trigger a Denial of Service, crashing the firewall. Affected products/versions include SonicOS Gen 6 (6.5.1.12, 6.0.5.3), SonicOSv (6.5.4.v), and Gen 7 (7.0.0.0). The entry is supp...

CVE-2018-9867

Summary : CVE-2018-9867 affects SonicWall SonicOS. The issue allows administrators who are not in the SonicWall Administrators user group (i.e., with insufficient permissions) to download imported certificates. This is documented across multiple sources (NVD entry and SonicWall PSIRT) and applies...