PRIVATE_FEEDS/CVE_VULN_FEED/CVE-2020-5135-sonicwall_vpn-rce/alert_text.md

Date: 2020-10-16

A critical security bug in the SonicWall VPN portal can be used to crash the device (DOS) It could also open the door to remote code execution (RCE) and is trivial to exploit, without logging in.

CVE : CVE-2020-5135 Vendor : SonicWall Product : SonicOS CPE : BaseScore : 9.4 Vector : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Patches : available Exploits : unknown

we found various IPs in your ORG/ASN, matching criteria for possible vulnerable systems

False-Positive-Level: low, possible

please find a list of affected IPs below and more information on that problem here:

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2020-5135
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010