All vulnerabilities

Servers and applications

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.

Severity
Medium 5.3
Published
30 Sept 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos
  • Version 6.5.4.6-79n

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-5132
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-5132