SO
Product
SonicOSv
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 7Low 0
Watch
Add SonicOSv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5141 | 6.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service Affected: through 6.5.4.4 |
| CVE-2020-5136 | 6.5 | Oct 12 | A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall… Affected: through 6.5.4.4 |
| CVE-2020-5134 | 6.5 | Oct 12 | A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash Affected: through 6.5.4.4 |
| CVE-2019-7474 | 6.5 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific… Affected: 6.5.0.2-8v_rc363; 6.5.0.2.8v_rc366; 6.5.0.2.8v_rc367; 6.5.0.2.8v_rc368 |
| CVE-2020-5142 | 6.1 | Oct 12 | A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface Affected: through 6.5.4.4 |
| CVE-2018-9867 | 5.5 | Feb 19 | In SonicWall SonicOS, administrators without full permissions can download imported certificates Affected: 6.5.0.2-8v_RC363 (VMWARE); 6.5.0.2.8v_RC367 (AZURE); 6.5.0.2.8v_RC368 (AWS); 6.5.0.2.8v_RC366 (HYPER_V) |
| CVE-2020-5143 | 5.3 | Oct 12 | SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses Affected: through 6.5.4.4 |
Showing 7