CVE-2023-39280

🗓️ 17 Oct 2023 22:17:36Reported by sonicwallType

SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-39280	18 Oct 202306:18	–	circl
CNNVD	SonicWALL SonicOS Buffer Error Vulnerability	17 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-39280	17 Oct 202322:17	–	cvelist
EUVD	EUVD-2023-43012	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Sonicwall	17 Oct 202300:00	–	ncsc
NVD	CVE-2023-39280	17 Oct 202323:15	–	nvd
Prion	Stack overflow	17 Oct 202323:15	–	prion
Positive Technologies	PT-2023-26863 · Sonicos · Sonicos	17 Oct 202300:00	–	ptsecurity
SonicWall	SonicOS affected by multiple vulnerabilities	17 Oct 202308:58	–	sonicwall
Tenable Nessus	SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)	5 Feb 202400:00	–	nessus

NVD

Vulners

Node

sonicwall sonicosRange<7.0.1-5145

AND

sonicwall nsa2700Match-

sonicwall nsa3700Match-

sonicwall nsa4700Match-

sonicwall nsa5700Match-

sonicwall nsa6700Match-

sonicwall nssp10700Match-

sonicwall nssp11700Match-

sonicwall nssp13700Match-

sonicwall nssp15700Match-

sonicwall nsv10Match-

sonicwall nsv100Match-

sonicwall nsv1600Match-

sonicwall nsv200Match-

sonicwall nsv25Match-

sonicwall nsv270Match-

sonicwall nsv300Match-

sonicwall nsv400Match-

sonicwall nsv470Match-

sonicwall nsv50Match-

sonicwall nsv800Match-

sonicwall nsv870Match-

sonicwall tz270Match-

sonicwall tz270wMatch-

sonicwall tz370Match-

sonicwall tz370wMatch-

sonicwall tz470Match-

sonicwall tz470wMatch-

sonicwall tz570Match-

sonicwall tz570pMatch-

sonicwall tz570wMatch-

sonicwall tz670Match-

Node

sonicwall sonicosRange<6.5.4.4-44v-21-2340

AND

sonicwall nsv10Match-

sonicwall nsv100Match-

sonicwall nsv1600Match-

sonicwall nsv200Match-

sonicwall nsv25Match-

sonicwall nsv270Match-

sonicwall nsv300Match-

sonicwall nsv400Match-

sonicwall nsv470Match-

sonicwall nsv50Match-

sonicwall nsv800Match-

sonicwall nsv870Match-

Node

sonicwall sonicosRange<6.5.4.13-105n

AND

sonicwall nsa_2600Match-

sonicwall nsa_2650Match-

sonicwall nsa_3600Match-

sonicwall nsa_3650Match-

sonicwall nsa_4600Match-

sonicwall nsa_4650Match-

sonicwall nsa_5600Match-

sonicwall nsa_5650Match-

sonicwall nsa_6600Match-

sonicwall nsa_6650Match-

sonicwall sm_9200Match-

sonicwall sm_9250Match-

sonicwall sm_9400Match-

sonicwall sm_9450Match-

sonicwall sm_9600Match-

sonicwall sm_9650Match-

sonicwall soho_250Match-

sonicwall soho_250wMatch-

sonicwall sohowMatch-

sonicwall tz_300Match-

sonicwall tz_300pMatch-

sonicwall tz_300wMatch-

sonicwall tz_350Match-

sonicwall tz_400Match-

sonicwall tz_400wMatch-

sonicwall tz_500Match-

sonicwall tz_500wMatch-

sonicwall tz_600Match-

sonicwall tz_600pMatch-

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "Management",
      "SSLVPN"
    ],
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.1-5119 and earlier versions"
      },
      {
        "status": "affected",
        "version": "7.0.1-5129 and earlier versions"
      },
      {
        "status": "affected",
        "version": "6.5.4.4-44v-21-2079 and earlier versions"
      },
      {
        "status": "affected",
        "version": "6.5.4.12-101n and earlier versions"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012

21 Nov 2024 08:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00484

SSVC