CVE-2020-5132: sonicwall sma100_firmware

Vulnerability summary

CVE-2020-5132 is a medium (CVSS 5.3) vulnerability in sonicwall sma100_firmware. EPSS estimates a 0.98% chance of exploitation in the next 30 days, higher than 61.6% of scored vulnerabilities.

Timeline

1. 30-09-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.