Lucene search
SonicwallCVE-2024-29012HistoryJun 20, 2024 - 9:15 a.m.
CVE-2024-29012
2024-06-2009:15:11
CWE-787
CWE-121
sonicwall
web.nvd.nist.gov
30
cve-2024-29012
denial of service
sonicos
http server
buffer overflow
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
17.7%
Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function.
Affected configurations
Node
sonicwallsonicosRange<7.0.1-5161
ORsonicwallsonicosRange7.1.1–7.1.1-7058
ORsonicwallsonicosRange7.1.2–7.1.2-7019
sonicwallnsa_2700Match-
ORsonicwallnsa_3700Match-
ORsonicwallnsa_4700Match-
ORsonicwallnsa_5700Match-
ORsonicwallnsa_6700Match-
ORsonicwallnssp_10700Match-
ORsonicwallnssp_11700Match-
ORsonicwallnssp_13700Match-
ORsonicwallnsv_270Match-
ORsonicwallnsv_470Match-
ORsonicwallnsv_870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sonicwall | sonicos | * | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| sonicwall | nsa_2700 | - | cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_3700 | - | cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_4700 | - | cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_5700 | - | cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_6700 | - | cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_10700 | - | cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_11700 | - | cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_13700 | - | cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:* |
| sonicwall | nsv_270 | - | cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unknown",
"platforms": [
"Gen7"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.1.1-7051 and earlier versions"
}
]
}
]Related
cvelist
cvelist
CVE-2024-29012
2024-06-20 08:11:10
nvd
nvd
CVE-2024-29012
2024-06-20 09:15:11
vulnrichment
vulnrichment
CVE-2024-29012
2024-06-20 08:11:10
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for CVE-2024-29012