CVE-2020-5130

EPSS 0.55%
Veröffentlicht 17.07.2020 18:15:12
Zuletzt bearbeitet 21.11.2024 05:33:35
Quelle PSIRT@sonicwall.com
CVE-Watchlists
Login
Unerledigt
Login

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sonicwall ≫ Sonicos Version <= 6.5.4.4-44n

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.55%	0.672

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-5130

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-5130

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-5130

EUVD