Lucene search

[email protected]CVE-2023-0656

HistoryMar 02, 2023 - 10:15 p.m.

CVE-2023-0656

2023-03-0222:15:09

CWE-787

CWE-121

[email protected]

web.nvd.nist.gov

cve-2023-0656

sonicos

stack-based buffer overflow

denial of service

dos

firewall

remote attack

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

Affected configurations

NVD

Node

sonicwallsonicosRange≤7.0.1-5111

AND

sonicwallnsa_2700Match-

sonicwallnsa_3700Match-

sonicwallnsa_4700Match-

sonicwallnsa_5700Match-

sonicwallnsa_6700Match-

sonicwallnssp_10700Match-

sonicwallnssp_11700Match-

sonicwallnssp_13700Match-

sonicwallnsv_270Match-

sonicwallnsv_470Match-

sonicwallnsv_870Match-

sonicwalltz270Match-

sonicwalltz270wMatch-

sonicwalltz370Match-

sonicwalltz370wMatch-

sonicwalltz470Match-

sonicwalltz470wMatch-

sonicwalltz570Match-

sonicwalltz570pMatch-

sonicwalltz570wMatch-

sonicwalltz670Match-

Node

sonicwallsonicosRange≤7.0.1-5083

AND

sonicwallnssp_15700Match-

Node

sonicwallsonicosRange≤6.5.4.4-44v-21-1551

AND

sonicwallnsv_10Match-

sonicwallnsv_100Match-

sonicwallnsv_1600Match-

sonicwallnsv_200Match-

sonicwallnsv_25Match-

sonicwallnsv_300Match-

sonicwallnsv_400Match-

sonicwallnsv_50Match-

sonicwallnsv_800Match-

CPENameOperatorVersion
sonicwall:sonicossonicwall sonicosle7.0.1-5111

CPE	Name	Operator	Version
sonicwall:sonicos	sonicwall sonicos	le	7.0.1-5111

CNA Affected

[
  {
    "vendor": "SonicWall",
    "product": "SonicOS",
    "versions": [
      {
        "version": "SonicOS NSv 6.5.4.4-44v-21-1551 and earlier",
        "status": "affected"
      },
      {
        "version": "SonicOS NSsp 7.0.1-5083 and earlier",
        "status": "affected"
      },
      {
        "version": "SonicOS 7.0.1-5095 and earlier",
        "status": "affected"
      }
    ]
  }
]