CVE-2020-5148

CVE-2020-5148 describes a vulnerability in SonicWall SSO-agent's default configuration, specifically within its NetAPI probing method, affecting SonicWall Directory Services Connector. This flaw allows an unauthenticated attacker to capture privileged user password hashes and potentially force SSO Agent authentication, thereby bypassing firewall access controls. With a CVSS score of 8.2 (HIGH), the vulnerability is easily exploitable over the network with low complexity, leading to high impact on integrity and low impact on confidentiality. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.