CVE-2020-5130 - AskarLabs CVE Database

CVE-2020-5130

Vendor Sonicwall

Product SonicOS

Weakness CWE-20 · Input validation

Published July 17, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Key dates

02Disclosure timeline

July 17, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5130 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html