Live › vulnerability › CVE-2020-5135
Go to dashboardA buffer overflow in SonicWall SonicOS, the firewall operating system, lets a remote attacker crash the firewall with a malicious request and possibly run arbitrary code on it. CISA lists it as actively exploited and tags it with ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SonicWall SonicOS | vendor | – | – |
Check the SonicOS version on the firewall management page (unknown which versions are affected in the sources) Check CISA KEV entry for CVE-2020-5135 for vendor advisory link
Apply the SonicWall SonicOS update that addresses CVE-2020-5135 per vendor instructions (exact fixed version unknown from sources)
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
This page as .md · .json · in your agent: get_signal("CVE-2020-5135")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.