CVE-2020-5132: SonicWall SMA100 Firmware

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.

Affected products

• SonicWall SMA100 Firmware: version 10.2.0.2-20sv only; version 12.4.0-2223 only
• SonicWall SonicOS: version 6.5.4.6-79n only

Published 2020-09-30. Last modified 2026-06-17.