CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2020-5135

CVSS 9.8v3.1pub. 2020-10-12upd. 2025-10-31

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Sonicwall Sonicos
OS
Sonicwall
7.0.0.0≤ 6.0.5.36.5.0.0 – 6.5.1.116.5.4.0 – 6.5.4.7
Sonicwall Sonicosv
OS
Sonicwall
≤ 6.5.4.4

CISA KEV — detailsi

Vendori: SonicWall ↗
Producti: SonicOS
Added to KEVi: March 15, 2022
Remediation deadline (US Federal)i: April 5, 2022(overdue)
Ransomwarei: Active ransomware campaigns exploit this vulnerability

🔧Advisory SonicWall↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

🔴