CVE-2020-5130CWE-20

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request

published July 17, 2020

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01251 · 69.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-07-17T17:15Z
EPSS history
Timeline
  • 17 JUL 17:15Z
    SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request
    cvelistv5