Lucene search

[email protected]CVE-2003-1320

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-1320

2022-10-0316:15:41

CWE-399

[email protected]

web.nvd.nist.gov

sonicwall

firmware

vulnerability

denial of service

code execution

cve-2003-1320

nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

JSON

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

Affected configurations

NVD

Node

sonicwallfirmwareRange≤6.4.0.1

CPENameOperatorVersion
sonicwall:firmwaresonicwall firmwarele6.4.0.1

CPE	Name	Operator	Version
sonicwall:firmware	sonicwall firmware	le	6.4.0.1

References

www.kb.cert.org/vuls/id/287771

www.kb.cert.org/vuls/id/AAMN-5L74VD

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

JSON

Related for CVE-2003-1320

nvd1 cvelist1 cisco1