info about this news

Alberto

is there an update ?

https://securityboulevard.com/2020/10/sonicwall-vpn-portal-critical-flaw-cve-2020-5135/

shiprasahu93

Hello @Alberto,

This was reported on issue ID GEN6-1268 and it is fixed on the latest firmware version 6.5.4.7. Please make sure that you are running on this firmware version.

https://www.sonicwall.com/support/knowledge-base/how-can-i-upgrade-sonicos-firmware/170504337655458/

Thanks!

Alberto

on Release Note 6.5.4.7 a see GEN6-1268 as DPI-SSL problems. Are you sure ?

shiprasahu93

That's my bad. GEN6-1268 is for a DPI SSL issue. But CVE-2020-5135 is addressed on 6.5.4.7-83n version.

I apologize for the confusion.

Alberto

I have this firmware and a ticket with support for a problem of aws process.

I have: sonicwall-NSA_6600-6_5_4_6-79n--HFGEN6-1249-2n-1602250568

I will ask the support how to behave. do you think it is better to upgrade?

shiprasahu93

Hello @Alberto,

It is essential to upgrade to 6.5.4.7-83n due to the vulnerability CVE-2020-5135. But, the issue ID GEN6-1249 is targeted on the next version 6.5.4.8. For now, kindly upgrade to 6.5.4.7, you would be either provided an HF on 6.5.4.7 or you can upgrade once 6.5.4.8 is web posted.

But, for now kindly keep the firmware up to date.

Thanks!

Alberto

I have hotfix 1249 on 6.5.4.6.

If I upgrade to 6.5.4.7-83n I have no hotfix 1249 ?

shiprasahu93

@Alberto,

You are right, HF 1249-2n is not included in 6.5.4.7-83n, it is targeted for 6.5.4.8. I think you should inform the same to support and request for a HF based on 6.5.4.7 base line firmware.

Thanks!

Alberto

I ask support il I can upgrade to 83n because 83n doesn't have HF1249

I'm waiting support.

Alberto

Alberto

upgraded but another reboot !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

10/20/2020 18:40:36.752Reboot due to task suspension10/20/2020 18:40:36.752Task Trace tFwAWSServiceAPI:
tFwAWSServ> 80529ab0     e6a98160  51 STOP       80d08658 e6a973a0  ad0003     0
Stack trace of tFwAWSServiceAPI:
0x8185755c -> ($13)
0x80529bf0 -> 0x80528cd8
0x80528d50 -> 0x80528aa0
0x80528c00 -> 0x80528850
0x805289bc -> 0x80b64718
0x818cd1a8 -> 0x80f67d58
0x80f67574 -> 0x80d08e40
0x80d09048 -> 0x80d08620
0x80d08658
Up: 0 d, 0:53:56
10/20/2020 18:42:44.928 System Startup F:6.5.4.7-83n T:base S:6.1.0.11 R: 5.4.1.2 C0EAE4F565AE  p: 10305; b: 10300

Alberto

please see if can related to HF1249

Alberto

I think is related (see old post).

Support open for my problem another ticket.

I have two reboots with info:

10/20/2020 18: 40: 36.752Reboot due to task suspension
10/20/2020 18: 40: 36.752Task Trace tFwAWSServiceAPI:
tFwAWSServ> 80529ab0 e6a98160 51 STOP 80d08658 e6a973a0 ad0003 0
Stack trace of tFwAWSServiceAPI:
0x8185755c -> ($ 13)
0x80529bf0 -> 0x80528cd8
0x80528d50 -> 0x80528aa0
0x80528c00 -> 0x80528850
0x805289bc -> 0x80b64718
0x818cd1a8 -> 0x80f67d58
0x80f67574 -> 0x80d08e40
0x80d09048 -> 0x80d08620
0x80d08658
Up: 0 d, 0:53:56
10/20/2020 18: 42: 44.928 System Startup F: 6.5.4.7-83n T: base S:
??6.1.0.11 R: 5.4.1.2 C0EAE4F565AE p: 10305; b: 10300

and also:

10/21/2020 03: 17: 22.032Reboot due to task suspension
10/21/2020 03: 17: 22.032Task Trace tFwAWSServiceAPI:
tFwAWSServ> 80529ab0 e6a98090 51 STOP 80d08658 e6a972d0 ad0003 0
Stack trace of tFwAWSServiceAPI:
0x8185755c -> ($ 13)
0x80529bf0 -> 0x80528cd8
0x80528d50 -> 0x80528aa0
0x80528c00 -> 0x80528850
0x805289bc -> 0x80b64718
0x818cd1a8 -> 0x80f67d58
0x80f67574 -> 0x80d08e40
0x80d09048 -> 0x80d08620
0x80d08658
Up: 0 d, 9:26:48
10/21/2020 03: 19: 30.848 System Startup F: 6.5.4.7-83n T: base S:
??6.1.0.11 R: 5.4.1.2 C0EAE4F56540 p: 10305; b: 10300

Alberto

Uploadaded to 6.5.4.7-83n with hot fix HF1249