{"metadata": {"vulnerability": "CVE-2020-5135", "count": 67, "kinds": {"milestone": 5, "sighting": 23, "kev": 11, "other": 28}}, "data": [{"timestamp": "2019-12-31T00:00:00Z", "date_only": false, "value": "2019-12-31T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-5135", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-12T00:00:00Z", "date_only": false, "value": "2020-10-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-10-12T10:40:28Z", "date_only": false, "value": "2020-10-12T10:40:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5135", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-12T10:40:28Z", "date_only": false, "value": "2020-10-12T10:40:28.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "CVE-2020-5135", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-12T11:15:00Z", "date_only": false, "value": "2020-10-12T11:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VW5M-894X-7RP4", "record": "GHSA-VW5M-894X-7RP4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-12T11:15:00Z", "date_only": false, "value": "2020-10-12T11:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-5135", "record": "GSD-2020-5135", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-12T11:15:12.747Z", "date_only": false, "value": "2020-10-12T11:15:12.747000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-10-12T11:15:12.747Z", "date_only": false, "value": "2020-10-12T11:15:12.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5135", "record": "FKIE_CVE-2020-5135", "field": "published"}, {"timestamp": "2020-10-13T00:00:00Z", "date_only": true, "value": "2020-10-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-28764", "record": "CNVD-2021-28764", "field": "submitTime"}, {"timestamp": "2020-10-14T11:19:39Z", "date_only": false, "value": "2020-10-14T11:19:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/24743", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "cfff76a7-aa26-45d0-9935-25c398b7f564", "content": "SonicWall VPN Portal Critical Flaw (CVE-2020-5135)\n\nhttps://ift.tt/2T61aMB", "url": "https://t.me/ctinow/24743"}, {"timestamp": "2020-10-14T20:58:10Z", "date_only": false, "value": "2020-10-14T20:58:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/15269", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "e8552858-7c53-4c1d-b636-a7a863e2e456", "content": "\u274c Critical SonicWall VPN Portal Bug Allows DoS, Worming RCE \u274c\n\nThe CVE-2020-5135 stack-based buffer overflow security vulnerability is trivial to exploit, without logging in.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/15269"}, {"timestamp": "2020-10-15T12:49:02Z", "date_only": false, "value": "2020-10-15T12:49:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/2534", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "347c5ff9-0da7-47f4-82ef-957e9084f38f", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 SonicWall VPN Portal DoS via wormable RCE | CVE-2020-5135\n\nhttps://threatpost.com/critical-sonicwall-vpn-bug/160108/", "url": "https://t.me/cKure/2534"}, {"timestamp": "2020-10-15T16:53:55Z", "date_only": false, "value": "2020-10-15T16:53:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1051", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "5aedde58-a190-4e5e-a89b-468187da2bf0", "content": "\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c SonicWall VPN \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5135, \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 Tripwire, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SonicWall VPN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441. \u041d\u043e, \u0447\u0442\u043e \u043d\u0430\u043c\u043d\u043e\u0433\u043e \u043e\u043f\u0430\u0441\u043d\u0435\u0435, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, \u0445\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0432\u0438\u0434\u0435\u043b. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 9,4 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\n12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 13 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441\u0432\u0435\u0442\u044f\u0442\u0441\u044f \u043f\u043e\u0447\u0442\u0438 800 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u0411\u0443\u0434\u0435\u043c \u043d\u0430\u0434\u0435\u044f\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u0448\u043b\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e.\n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 CVE-2020-5135 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f ransomware. \u0422\u0430\u043a\u0436\u0435, \u043a\u0430\u043a \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0441 Pulse VPN.", "url": "https://t.me/true_secator/1051"}, {"timestamp": "2020-10-16T08:40:02Z", "date_only": false, "value": "2020-10-16T08:40:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/9084", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "e9fe5130-c91f-4775-8aaa-9dfc9b73bad6", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438\u0437 Tripwire VERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-5135) \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 SonicWall Network Security Appliance (NSA). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 HTTP/HTTPS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SSL VPN.     \nDoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SonicWall VPN \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430", "url": "https://t.me/SecLabNews/9084"}, {"timestamp": "2020-10-17T00:59:55Z", "date_only": false, "value": "2020-10-17T00:59:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsecalert/129", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "d7f3cb13-979c-4fe6-9bcf-2c137768b4be", "content": "\u26a0\ufe0fSonicWall VPN Portal Critical Flaw\nTripwire VERT has identified a stack-based buffer overflow in SonicWall Network Security Appliance (NSA).\nA fix is available. \n\nSonicWall has indicated that the following versions are vulnerable:\n* SonicOS 6.5.4.7-79n and earlier\n* SonicOS 6.5.1.11-4n and earlier\n* SonicOS 6.0.5.3-93o and earlier\n* SonicOSv 6.5.4.4-44v-21-794 and earlier\n* SonicOS 7.0.0.0-1\n\n(Severity: \ud83d\udd38high)\n\nAdditional information:\nhttps://www.tripwire.com/state-of-security/vert/sonicwall-vpn-portal-critical-flaw-cve-2020-5135/\n\n#alert #severityHigh #vulnerability #firewall #sonicwall\n#CVE2020-5135", "url": "https://t.me/itsecalert/129"}, {"timestamp": "2020-10-19T00:00:00Z", "date_only": false, "value": "2020-10-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-651", "record": "CERTFR-2020-AVI-651", "field": "last_revision_date"}, {"timestamp": "2020-10-19T00:00:00Z", "date_only": false, "value": "2020-10-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-651", "record": "CERTFR-2020-AVI-651", "field": "initial_release_date"}, {"timestamp": "2020-10-19T00:00:00Z", "date_only": false, "value": "2020-10-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-651", "record": "CERTFR-2020-AVI-651", "field": "revisions.0.revision_date"}, {"timestamp": "2020-10-19T12:05:18Z", "date_only": false, "value": "2020-10-19T12:05:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-sonicwall-vpn-laitteissa", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "ffd72d0e-67b8-4a31-8f2b-7cb3c0c334c1", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-sonicwall-vpn-laitteissa"}, {"timestamp": "2020-11-22T02:02:25Z", "date_only": false, "value": "2020-11-22T02:02:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xKBiCHff9nTVWFrePWDscJ9nn77DJ8BteXeOh8VNK-OBbC8", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "7d952a45-9c8d-4ff0-a210-9f04c9e604e7"}, {"timestamp": "2021-04-16T00:00:00Z", "date_only": true, "value": "2021-04-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-28764", "record": "CNVD-2021-28764", "field": "openTime"}, {"timestamp": "2021-05-10T00:00:00Z", "date_only": false, "value": "2021-05-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-05-10T05:45:00Z", "date_only": false, "value": "2021-05-10T05:45:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-06-22T20:36:34Z", "date_only": false, "value": "2021-06-22T20:36:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/10007", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "409e3f23-73b0-49ca-9c9b-c76d1ab9092a", "content": "SonicWall bug that affected 800K firewalls was only partially fixed\n\nNew findings have emerged that shed light on a critical SonicWall vulnerability disclosed last year, which affected over 800,000 VPN firewalls and was initially thought to have been patched. Tracked as CVE-2020-5135, when exploited,\u00a0the bug allows\u00a0unauthenticated remote attackers to execute arbitrary code on the impacted devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/sonicwall-bug-that-affected-800k-firewalls-was-only-partially-fixed/", "url": "https://t.me/BleepingComputer/10007"}, {"timestamp": "2021-06-22T20:36:45Z", "date_only": false, "value": "2021-06-22T20:36:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/35679", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "44f43cd4-f426-4a84-bb0a-f3e4504cee42", "content": "Analyzing SonicWall\u2019s Unsuccessful Fix for CVE-2020-5135\n\nhttps://ift.tt/3d5c2EF", "url": "https://t.me/ctinow/35679"}, {"timestamp": "2021-06-23T13:33:33Z", "date_only": false, "value": "2021-06-23T13:33:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1842", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "4da2d232-cfed-4fa1-9f1e-86002eeb10a7", "content": "\u200b\u200b\u041e\u0441\u0435\u043d\u044c\u044e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0432 Sonic Wall VPN \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5135 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 9,4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u0432 \u0442\u0435\u043e\u0440\u0438\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0443\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE). \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u044f \u0432 \u0441\u0435\u0442\u0438 \u0441\u0432\u0435\u0442\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0447\u0442\u0438 800 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tripwire \u041a\u0440\u0435\u0439\u0433 \u042f\u043d\u0433, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043a\u043e\u0440\u044f\u0432\u044b\u043c. \n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 Sonic Wall \u0441\u0442\u0430\u043b \u0432\u043c\u0435\u0441\u0442\u043e \u0432\u044b\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0441\u0430\u0434\u043e\u043a \u0432\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 DoS \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u0442\u043e\u043a \u0441\u043e\u0437\u043d\u0430\u043d\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0441\u044f \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u0430\u043c\u043f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0412 \u0438\u0442\u043e\u0433\u0435 SonicWall \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u043c\u0430\u0445, \u043f\u0440\u0430\u0432\u0434\u0430 \u043d\u0430 \u0434\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 CVE-2021-20019 \u0438\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \"\u0432\u0441\u0435\u0433\u043e-\u0442\u043e\" 8 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0422\u0430\u043a\u043e\u0435 \u0441\u0435\u0431\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e.", "url": "https://t.me/true_secator/1842"}, {"timestamp": "2021-06-23T20:35:12Z", "date_only": false, "value": "2021-06-23T20:35:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/10934", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "9d1610bf-c5c8-4404-92af-c9d6352599ba", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430\n\n\u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043e\u0441\u0435\u043d\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5135, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 SonicOS, \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall Network Security Appliance (NSA), \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0434\u043e \u043a\u043e\u043d\u0446\u0430. \u0422\u0435\u043f\u0435\u0440\u044c \u0431\u0430\u0433\u0443 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u0438 \u0432\u044b\u0448\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\nhttps://xakep.ru/2021/06/23/cve-2021-20019/", "url": "https://t.me/xakep_ru/10934"}, {"timestamp": "2021-10-25T22:32:42Z", "date_only": false, "value": "2021-10-25T22:32:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "2aadbf64-5308-40d8-8350-11edd8b77cfe"}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "timestamps.asserted_at", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-5135", "field": "timestamps.asserted_at", "uuid": "8a344ca3-1989-4bc2-a4f1-e83e46be319b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": true, "value": "2022-03-15", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5135", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": true, "value": "2022-03-15", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-5135", "record": "GSD-2020-5135", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-5135", "field": "evidence.0.details.added_date", "uuid": "8a344ca3-1989-4bc2-a4f1-e83e46be319b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": true, "value": "2022-03-15", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "evidence.0.details.date_added", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "timestamps.first_seen_at", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-5135", "field": "timestamps.first_seen_at", "uuid": "8a344ca3-1989-4bc2-a4f1-e83e46be319b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "status.status_updated_at", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-5135", "field": "status.status_updated_at", "uuid": "8a344ca3-1989-4bc2-a4f1-e83e46be319b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": false, "value": "2022-03-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5135", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-05T00:00:00Z", "date_only": true, "value": "2022-04-05", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "evidence.0.details.due_date", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-05T00:00:00Z", "date_only": true, "value": "2022-04-05", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-5135", "record": "GSD-2020-5135", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:30:31Z", "date_only": false, "value": "2022-05-24T17:30:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VW5M-894X-7RP4", "record": "GHSA-VW5M-894X-7RP4", "field": "published"}, {"timestamp": "2022-09-03T00:00:00Z", "date_only": false, "value": "2022-09-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-09-03T03:57:00Z", "date_only": false, "value": "2022-09-03T03:57Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-5135", "record": "GSD-2020-5135", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-09-05T00:00:00Z", "date_only": false, "value": "2022-09-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "82e9c9cc-9e0a-45d0-90a0-a44b9b6a81cf"}, {"timestamp": "2023-12-13T01:22:03.842Z", "date_only": false, "value": "2023-12-13T01:22:03.842667Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-5135", "record": "GSD-2020-5135", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T08:22:08.937Z", "date_only": false, "value": "2024-08-04T08:22:08.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-5135", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:09:38Z", "date_only": false, "value": "2024-11-14T06:09:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/eb1a53d4-747b-4ff3-95d7-99cef03881b5", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "53c2d96e-8536-4aa0-a142-3b672c56cbd1"}, {"timestamp": "2024-12-24T20:28:35.889Z", "date_only": false, "value": "2024-12-24T20:28:35.889784Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971388", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "576390cd-6a57-4b78-93da-32ae2266dbc2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971388"}, {"timestamp": "2025-02-06T19:55:08.576Z", "date_only": false, "value": "2025-02-06T19:55:08.576470Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5135", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-06T19:55:08.576Z", "date_only": false, "value": "2025-02-06T19:55:08.576470Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5135", "record": "FKIE_CVE-2020-5135", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:27Z", "date_only": false, "value": "2025-02-23T02:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "8faf3880-ca5f-4687-849d-57ce2c5b2fe0"}, {"timestamp": "2025-10-21T23:35:35.728Z", "date_only": false, "value": "2025-10-21T23:35:35.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-5135", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:35.728Z", "date_only": false, "value": "2025-10-21T23:35:35.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5135", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:58Z", "date_only": false, "value": "2025-10-22T00:31:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VW5M-894X-7RP4", "record": "GHSA-VW5M-894X-7RP4", "field": "modified"}, {"timestamp": "2025-10-31T14:40:10.580Z", "date_only": false, "value": "2025-10-31T14:40:10.580000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T15:37:02.810Z", "date_only": false, "value": "2025-11-18T15:37:02.810000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202010-1187", "record": "VAR-202010-1187", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:06.729Z", "date_only": false, "value": "2026-02-02T12:28:06.729566Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2414f3bd-1e66-4eb4-9ab2-8c89c9e45def", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "f0116072-be94-4140-886a-07df3310dd6e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2414f3bd-1e66-4eb4-9ab2-8c89c9e45def"}, {"timestamp": "2026-02-02T12:28:06.729Z", "date_only": false, "value": "2026-02-02T12:28:06.729566Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2414f3bd-1e66-4eb4-9ab2-8c89c9e45def", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "fb0b09e3-516c-494c-958d-77feb0518c35", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2414f3bd-1e66-4eb4-9ab2-8c89c9e45def"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-5135", "field": "timestamps.recorded_at", "uuid": "6a65d1b1-1761-44f4-993a-104a6d60c12e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T14:50:31.873Z", "date_only": false, "value": "2026-03-17T14:50:31.873468Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-sonicwall-vpn-laitteissa", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "5ee8e3b1-45c9-448b-98b5-2a22ee4da939", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittinen-haavoittuvuus-sonicwall-vpn-laitteissa"}, {"timestamp": "2026-06-17T03:20:57.470Z", "date_only": false, "value": "2026-06-17T03:20:57.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5135", "record": "FKIE_CVE-2020-5135", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:29.237Z", "date_only": false, "value": "2026-06-19T12:47:29.237455Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82f39935-ea5e-4231-8196-51013f3c3d50", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "18e8401c-4e0c-4061-bd9f-656565d9e599", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82f39935-ea5e-4231-8196-51013f3c3d50"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-5135", "field": "timestamps.recorded_at", "uuid": "8a344ca3-1989-4bc2-a4f1-e83e46be319b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:39.970Z", "date_only": false, "value": "2026-06-23T11:13:39.970635Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a344ca3-1989-4bc2-a4f1-e83e46be319b", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "37e54c74-5b5d-44cf-a5b2-aa9c42456a1b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a344ca3-1989-4bc2-a4f1-e83e46be319b"}, {"timestamp": "2026-06-23T14:05:08.154Z", "date_only": false, "value": "2026-06-23T14:05:08.154328Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/470371a9-1711-491c-93df-59b2350a21bf", "record": "CVE-2020-5135", "field": "creation_timestamp", "uuid": "b6b6116d-fc7f-4c25-9249-0680fd3b706d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/470371a9-1711-491c-93df-59b2350a21bf"}]}