CVE-2020-5130

5.3 mediumEPSS 1.3%

Medium (5.3) in sonicwall sonicos. EPSS 1.3% chance of exploitation in the next 30 days.

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2020-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:sonicos

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003

Check your stack JSON