Skip to content
Sign in
Not rated

CVE-2020-5132 SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as…

Description

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.

Affected products and versions

Product Affected versions Fixed in
SMA100 Versions not published
SMA1000 Versions not published
SonicOS Versions not published

Other CVEs of SMA100

The 26 CVEs of SMA100 →
CVE-2025-40603 A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,… 4.5 Medium CVE-2025-32821 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin… 7.1 High CVE-2025-32820 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal… 8.3 High CVE-2025-32819 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path… 8.8 High
Track this CVE