Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-04-05. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
米国サイバーセキュリティ・社会基盤安全保障庁(CISA)の既知の悪用された脆弱性カタログが更新。以下脆弱性について悪用が確認された。 - CVE-2021-43226 (Windows) - CVE-2020-5135 (SonicOS) - CVE-2012-0158 (Windows) https://t.co/36dA3GHlV2
Post summary
CISA updates its known exploited vulnerability catalog, confirming active exploitation of CVE-2021-43226, CVE-2020-5135, and CVE-2012-0158.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | sonicwall | sonicos | - | - | - |
| OS | sonicwall | sonicos | 7.0.0.0 | - | - |
| OS | sonicwall | sonicosv | - | - | - |