PT-2020-18269
CVE-2020-5129
·
Published
2020-03-26
·
Updated
2020-03-30
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SonicWall SMA1000 versions 12.1.0-06411 and earlier
Description
A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause an HTTP server crash, leading to Denial of Service.
Recommendations
For versions 12.1.0-06411 and earlier, update to a version later than 12.1.0-06411 to resolve the issue.
As a temporary workaround, consider restricting access to the HTTP Extraweb server to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾