Known vulnerabilities in SonicOS 5.9

Vendor: SonicWall
Software: SonicOS
Version: 5.9
Software CPE: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SonicOS version 5.9 SonicOS 5.9 is affected by 12 vulnerabilities: 7 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59236 - Stack-based buffer overflow
CVE-2021-20048		 CWE-121 High
No
No
 6.5.4.4-44V-21-1452, 6.5.4.9-92n 05.01.2022 SB2022010525
#VU59235 - Stack-based buffer overflow
CVE-2021-20046		 CWE-121 High
No
No
 6.5.4.9-92n 05.01.2022 SB2022010525
#VU57238 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2021-20031		 CWE-644 Low
Public exploit available
No
 6.5.1.13-1n, 6.5.4.v_21s-1288, 6.5.4.8-89n, 7.0.1-R1456, 7.0.1-5018-R1715, 7.0.1-5023-1349 12.10.2021 SB2021101206
#VU47682 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5143		 CWE-200 Low
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47683 - Out-of-bounds read
CVE-2020-5134		 CWE-125 Medium
No
No
 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47685 - Memory corruption
CVE-2020-5136		 CWE-119 High
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47686 - Memory corruption
CVE-2020-5137		 CWE-119 High
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47687 - Heap-based Buffer Overflow
CVE-2020-5138		 CWE-122 High
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47688 - Untrusted Pointer Dereference
CVE-2020-5139		 CWE-822 High
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47689 - Out-of-bounds read
CVE-2020-5140		 CWE-125 High
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47690 - Improper Control of Interaction Frequency
CVE-2020-5141		 CWE-799 Medium
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601
#VU47691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5142		 CWE-79 Medium
No
No
 5.9.2.7-5n, 5.9.2.13-7n, 6.0.5.3-94o, 6.5.1.12-1n, 6.5.4.v-21s-987, 6.5.4.7-83n, 7 7.0.0.0-2 12.10.2020 SB2020101601