CVE-2020-5132 Information disclosure in SMA100
Attackers can exploit exposed internal domain names in SSL-VPN authentication pages to potentially bypass security controls or gain unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5132?
CVE-2020-5132 is a medium-severity vulnerability in Sonicwall Sonicos, published on 30 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.
Weakness: CWE-200
Which versions are affected by CVE-2020-5132?
It affects 2 products.
Products include Sonicwall Sma100 Firmware, Sonicwall Sonicos.
How do I fix CVE-2020-5132?
No fix has been published for CVE-2020-5132 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5132 being exploited?
There is no known exploitation of CVE-2020-5132 in the wild and no public exploit code.
Other vulnerabilities in Sonicwall Sonicos
Sources
Also known as GHSA-cm74-jg3x-hghv.