CVE-2020-5129

CWE-248 CWE-444 — HTTP Request Smuggling3 documents3 sources

Severity

7.5HIGH

EPSS

0.5%

top 33.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sonicwall Sma1000 Firmware Sonicwall Sma1000

Timeline

PublishedMar 26

Latest updateMay 24

Description

A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-06411 and earlier.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDsonicwall/sma1000_firmware12.1.0-06411

▶CVEListV5sonicwall/sma100012.1.0-06411 and earlier

🔴Vulnerability Details

GHSA

GHSA-mg4p-5r5g-f6x9: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Deni↗2022-05-24

▶

CVEList

CVE-2020-5129: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Deni↗2020-03-26

▶