Sonicosv
Vendor:
First CVE: May 22, 2018 · Active for 8 years
19
Total CVEs
More Total CVEs than 95% of tracked products
3.8
Avg CVEs / Year
Higher CVE frequency than 85% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 48% of tracked products
5.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Sonicosv over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 22, 2018
8 years ago
Most Recent CVE
Mar 25, 2022
1,586 days ago
CVE Severity & Scoring
Sonicosv19 CVEs
42%
42%
16%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (10.5%)
Network17 (89.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low19 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None18 (94.7%)
Unknown0 (0.0%)
Required1 (5.3%)
Privileges Required
Low5 (26.3%)
High1 (5.3%)
None13 (68.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-5135CRITICAL A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the fi | Oct 12, 2020 | 9.8 | 80 | YES | NO |
CVE-2018-3639MEDIUM Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthori | May 22, 2018 | 5.5 | 65 | NO | YES |
CVE-2022-22274CRITICAL A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code | Mar 25, 2022 | 9.8 | 63 | NO | NO |
CVE-2020-5140HIGH A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads t | Oct 12, 2020 | 7.5 | 26 | NO | NO |
CVE-2020-5139HIGH A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall cr | Oct 12, 2020 | 7.5 | 26 | NO | NO |
CVE-2020-5138HIGH A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash. Th | Oct 12, 2020 | 7.5 | 26 | NO | NO |
CVE-2020-5137HIGH A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash. Thi | Oct 12, 2020 | 7.5 | 25 | NO | NO |
CVE-2020-5133HIGH A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vulnerability affected | Oct 12, 2020 | 7.5 | 25 | NO | NO |
CVE-2021-20019HIGH A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure | Jun 23, 2021 | 7.5 | 24 | NO | NO |
CVE-2019-7475CRITICAL A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnera | Apr 2, 2019 | 9.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
1 CVE
5.3% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
5.3% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Sonicosv
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.5.4.4-44v-21-955 | 1 | 7.5 | 1.4% | 0 | 0 |
| 6.5.0.2.8v_rc368 | 4 | 7.3 | 0.9% | 0 | 0 |
| 6.5.0.2.8v_rc367 | 4 | 7.3 | 0.9% | 0 | 0 |
| 6.5.0.2.8v_rc366 | 4 | 7.3 | 0.9% | 0 | 0 |
| 6.5.0.2-8v_rc363 | 4 | 7.3 | 0.9% | 0 | 0 |
| 6.5.0.2.8v | 1 | 7.2 | 0.9% | 0 | 0 |