ZeroDay Findings
Sign inSign up

Findings

CVE-2020-5135

SonicWall SonicOS Buffer Overflow Vulnerability

Published Oct 12, 2020 · updated Jun 16, 2026 · sonicwall sonicos

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 12, 2020 · Catalog

    Detected

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

  2. Mar 15, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 5, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

Required action

Apply updates per vendor instructions.

CISA due date Apr 5, 2022

Affected

  • cpe sonicwall/sonicosversion unspecified
  • cpe sonicwall/sonicos7.0.0.0
  • cpe sonicwall/sonicosvversion unspecified
  • vendor SonicWall SonicOSversion unspecified

Sources

  • CISA KEVCVE-2020-5135

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

    cisa.gov
  • CVE.orgCVE-2020-5135

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-5135

    30-day exploitation probability 26.9%

    first.org
  • NIST NVDCVE-2020-5135

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4

    nvd.nist.gov

References

CVE-2020-5135 · ZeroDay Findings