CVE-2020-5130

EPSS 0.55%
Published 17.07.2020 18:15:12
Last modified 21.11.2024 05:33:35
Source PSIRT@sonicwall.com
Teams watchlist Login
Open Login

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Sonicwall ≫ Sonicos Version <= 6.5.4.4-44n

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.55%	0.672

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-5130

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-5130

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-5130

EUVD