Lucene search

[email protected]CVE-2023-41715

HistoryOct 17, 2023 - 11:15 p.m.

CVE-2023-41715

2023-10-1723:15:12

CWE-269

[email protected]

web.nvd.nist.gov

sonicos

post-authentication

privilege management

vulnerability

ssl vpn tunnel

cve-2023-41715

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.2%

JSON

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.

CPENameOperatorVersion
sonicwall:sonicossonicwall sonicoslt7.0.1-5145
sonicwall:sonicossonicwall sonicoseq6.5.3.1
sonicwall:sonicossonicwall sonicoseq6.5.4.0.
sonicwall:sonicossonicwall sonicoseq5.9.1.10
sonicwall:sonicossonicwall sonicoseq6.2.0.1
sonicwall:sonicossonicwall sonicoseq6.1.2.0
sonicwall:sonicossonicwall sonicoseq6.4.1.0-3n
sonicwall:sonicossonicwall sonicoseq6.5.4.13-105n
sonicwall:sonicossonicwall sonicoseq6.2.5.3
sonicwall:sonicossonicwall sonicoseq6.5.1.3

CPE	Name	Operator	Version
sonicwall:sonicos	sonicwall sonicos	lt	7.0.1-5145
sonicwall:sonicos	sonicwall sonicos	eq	6.5.3.1
sonicwall:sonicos	sonicwall sonicos	eq	6.5.4.0.
sonicwall:sonicos	sonicwall sonicos	eq	5.9.1.10
sonicwall:sonicos	sonicwall sonicos	eq	6.2.0.1
sonicwall:sonicos	sonicwall sonicos	eq	6.1.2.0
sonicwall:sonicos	sonicwall sonicos	eq	6.4.1.0-3n
sonicwall:sonicos	sonicwall sonicos	eq	6.5.4.13-105n
sonicwall:sonicos	sonicwall sonicos	eq	6.2.5.3
sonicwall:sonicos	sonicwall sonicos	eq	6.5.1.3

Rows per page:

1-10 of 841

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.2%

JSON

Related for CVE-2023-41715

cvelist1 prion1 nessus1