Lucene search

SonicwallCVE-2024-40764

HistoryJul 18, 2024 - 8:15 a.m.

CVE-2024-40764

2024-07-1808:15:02

CWE-122

CWE-787

sonicwall

web.nvd.nist.gov

cve-2024-40764

heap-based buffer overflow

sonicos ipsec vpn

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).

Affected configurations

Nvd

Node

sonicwallsonicosRange<6.5.4.v-21s-rc2457

AND

sonicwallnsv10Match-

sonicwallnsv100Match-

sonicwallnsv1600Match-

sonicwallnsv200Match-

sonicwallnsv25Match-

sonicwallnsv300Match-

sonicwallnsv400Match-

sonicwallnsv50Match-

sonicwallnsv800Match-

Node

sonicwallsonicosRange<7.0.1-5161

sonicwallsonicosRange7.1.1-7040–7.1.1-7058

AND

sonicwallnsa_2700Match-

sonicwallnsa_3700Match-

sonicwallnsa_4700Match-

sonicwallnsa_5700Match-

sonicwallnsa_6700Match-

sonicwallnssp_10700Match-

sonicwallnssp_11700Match-

sonicwallnssp_13700Match-

sonicwallnssp_15700Match-

sonicwallnsv_270Match-

sonicwallnsv_470Match-

sonicwallnsv_870Match-

sonicwalltz270Match-

sonicwalltz270wMatch-

sonicwalltz370Match-

sonicwalltz370wMatch-

sonicwalltz470Match-

sonicwalltz470wMatch-

sonicwalltz570Match-

sonicwalltz570pMatch-

sonicwalltz570wMatch-

sonicwalltz670Match-

VendorProductVersionCPE
sonicwallsonicos*cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwallnsv10-cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*
sonicwallnsv100-cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*
sonicwallnsv1600-cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*
sonicwallnsv200-cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*
sonicwallnsv25-cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*
sonicwallnsv300-cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*
sonicwallnsv400-cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*
sonicwallnsv50-cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*
sonicwallnsv800-cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	sonicos	*	cpe:2.3:o:sonicwall:sonicos::::::::
sonicwall	nsv10	-	cpe:2.3:h:sonicwall:nsv10:-:::::::*
sonicwall	nsv100	-	cpe:2.3:h:sonicwall:nsv100:-:::::::*
sonicwall	nsv1600	-	cpe:2.3:h:sonicwall:nsv1600:-:::::::*
sonicwall	nsv200	-	cpe:2.3:h:sonicwall:nsv200:-:::::::*
sonicwall	nsv25	-	cpe:2.3:h:sonicwall:nsv25:-:::::::*
sonicwall	nsv300	-	cpe:2.3:h:sonicwall:nsv300:-:::::::*
sonicwall	nsv400	-	cpe:2.3:h:sonicwall:nsv400:-:::::::*
sonicwall	nsv50	-	cpe:2.3:h:sonicwall:nsv50:-:::::::*
sonicwall	nsv800	-	cpe:2.3:h:sonicwall:nsv800:-:::::::*

Rows per page:

1-10 of 321

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Gen6",
      "Gen7"
    ],
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.4.4-44v-21-2395 and older versions"
      },
      {
        "status": "affected",
        "version": "7.0.1-5151 and older versions"
      },
      {
        "status": "affected",
        "version": "7.1.1-7051 and older versions"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-40764