SonicOS firewalls
CVE-2020-5135: SonicOS Buffer Overflow
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicOS SonicOS 6.5 | See the advisory |
| SonicOS SonicOS 6.0 | See the advisory |
| SonicOS SonicOSv 6.5 | See the advisory |
| SonicOS SonicOS 7.0 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
Exploitation
CISA lists this CVE as exploited in the wild since 15 Mar 2022, including in ransomware campaigns.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.