Approved changes feed: RSS · Atom

cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*

part: o version: 7.0.0.0 update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSonicos (a9f51cd4-e72c-552e-aa03-091fd1a0fb8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5143 vulnerable 2026-06-08 05:26:41.445641 Details available
SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Published: 2020-10-12T10:40:32.000Z
Updated: 2024-08-04T08:22:08.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5142 vulnerable 2026-06-08 05:26:41.445098 Details available
A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Published: 2020-10-12T10:40:31.000Z
Updated: 2024-08-04T08:22:09.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5141 vulnerable 2026-06-08 05:26:41.444545 Details available
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Published: 2020-10-12T10:40:31.000Z
Updated: 2024-08-04T08:22:08.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5140 vulnerable 2026-06-08 05:26:41.443804 Details available
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Published: 2020-10-12T10:40:30.000Z
Updated: 2024-08-04T08:22:08.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5139 vulnerable 2026-06-08 05:26:41.443355 Details available
A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
Published: 2020-10-12T10:40:30.000Z
Updated: 2024-08-04T08:22:08.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5138 vulnerable 2026-06-08 05:26:41.442589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5137 vulnerable 2026-06-08 05:26:41.441873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5136 vulnerable 2026-06-08 05:26:41.441309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5135 vulnerable 2026-06-08 05:26:41.440811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5134 vulnerable 2026-06-08 05:26:41.439966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5133 vulnerable 2026-06-08 05:26:41.438717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.