Lucene search
HistoryOct 17, 2023 - 11:15 p.m.
CVE-2023-39276
cve-2023-39276
sonicos
post-authentication
buffer overflow
getbookmarklist.json
url endpoint
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.
Affected configurations
Node
sonicwallnsa2700Match-
ORsonicwallnsa3700Match-
ORsonicwallnsa4700Match-
ORsonicwallnsa5700Match-
ORsonicwallnsa6700Match-
ORsonicwallnssp10700Match-
ORsonicwallnssp11700Match-
ORsonicwallnssp13700Match-
ORsonicwallnssp15700Match-
ORsonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
sonicwallsonicosRange<7.0.1-5145
Node
sonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
sonicwallsonicosRange<6.5.4.4-44v-21-2340
Node
sonicwallnsa_2600Match-
ORsonicwallnsa_2650Match-
ORsonicwallnsa_3600Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_4600Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_5600Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6600Match-
ORsonicwallnsa_6650Match-
ORsonicwallsm_9200Match-
ORsonicwallsm_9250Match-
ORsonicwallsm_9400Match-
ORsonicwallsm_9450Match-
ORsonicwallsm_9600Match-
ORsonicwallsm_9650Match-
ORsonicwallsoho_250Match-
ORsonicwallsoho_250wMatch-
ORsonicwallsohowMatch-
ORsonicwalltz_300Match-
ORsonicwalltz_300pMatch-
ORsonicwalltz_300wMatch-
ORsonicwalltz_350Match-
ORsonicwalltz_400Match-
ORsonicwalltz_400wMatch-
ORsonicwalltz_500Match-
ORsonicwalltz_500wMatch-
ORsonicwalltz_600Match-
ORsonicwalltz_600pMatch-
sonicwallsonicosRange<6.5.4.13-105n
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonicwall:sonicos | sonicwall sonicos | lt | 7.0.1-5145 |
CNA Affected
[
{
"defaultStatus": "unknown",
"modules": [
"Management",
"SSLVPN"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.0.1-5119 and earlier versions"
},
{
"status": "affected",
"version": "7.0.1-5129 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.4-44v-21-2079 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.12-101n and earlier versions"
}
]
}
]Related
cvelist
cvelist
CVE-2023-39276
2023-10-17 22:04:34
prion
prion
Stack overflow
2023-10-17 23:15:00
nvd
nvd
CVE-2023-39276
2023-10-17 23:15:11
nessus
nessus
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)
2024-02-05 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
Related for CVE-2023-39276