Lucene search
SonicwallCVE-2024-29013HistoryJun 20, 2024 - 9:15 a.m.
CVE-2024-29013
2024-06-2009:15:11
CWE-787
CWE-122
sonicwall
web.nvd.nist.gov
40
sonicos
ssl-vpn
buffer overflow
dos
memcpy
cve-2024-29013
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0
Percentile
14.0%
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.
Affected configurations
Node
sonicwallsonicosRange<7.0.1-5161
ORsonicwallsonicosRange7.1.1–7.1.1-7058
ORsonicwallsonicosRange7.1.2–7.1.2-7019
sonicwallnsa_2700Match-
ORsonicwallnsa_3700Match-
ORsonicwallnsa_4700Match-
ORsonicwallnsa_5700Match-
ORsonicwallnsa_6700Match-
ORsonicwallnssp_10700Match-
ORsonicwallnssp_11700Match-
ORsonicwallnssp_13700Match-
ORsonicwallnsv_270Match-
ORsonicwallnsv_470Match-
ORsonicwallnsv_870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sonicwall | sonicos | * | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
| sonicwall | nsa_2700 | - | cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_3700 | - | cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_4700 | - | cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_5700 | - | cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:* |
| sonicwall | nsa_6700 | - | cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_10700 | - | cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_11700 | - | cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:* |
| sonicwall | nssp_13700 | - | cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:* |
| sonicwall | nsv_270 | - | cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unknown",
"platforms": [
"Gen7"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.1.1-7051 and earlier versions"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-29013
2024-06-20 08:14:23
nvd
nvd
CVE-2024-29013
2024-06-20 09:15:11
cvelist
cvelist
CVE-2024-29013
2024-06-20 08:14:23
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0
Percentile
14.0%
Related for CVE-2024-29013