Lucene search

K

Nsa 3700 Security Vulnerabilities

cve
cve

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS...

9.8CVSS

9.4AI Score

0.001EPSS

2024-02-08 02:15 AM
65
cve
cve

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA...

8.8CVSS

8.4AI Score

0.001EPSS

2023-03-02 10:15 PM
57
cve
cve

CVE-2023-0656

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to...

7.5CVSS

8.1AI Score

0.002EPSS

2023-03-02 10:15 PM
37
cve
cve

CVE-2022-22277

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in...

5.3CVSS

5.2AI Score

0.001EPSS

2022-04-27 05:15 PM
51
cve
cve

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized...

5.3CVSS

5.1AI Score

0.001EPSS

2022-04-27 05:15 PM
52
cve
cve

CVE-2022-22275

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is...

7.5CVSS

7.5AI Score

0.001EPSS

2022-04-27 05:15 PM
56
2
cve
cve

CVE-2022-22278

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS)...

7.5CVSS

7.3AI Score

0.001EPSS

2022-04-27 05:15 PM
42
cve
cve

CVE-2022-22274

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the...

9.8CVSS

9.8AI Score

0.004EPSS

2022-03-25 11:15 PM
205
cve
cve

CVE-2021-20046

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware...

8.8CVSS

8.6AI Score

0.004EPSS

2022-01-10 02:10 PM
24
cve
cve

CVE-2021-20048

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware...

8.8CVSS

8.7AI Score

0.004EPSS

2022-01-10 02:10 PM
19
cve
cve

CVE-2021-20031

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web...

6.1CVSS

6.1AI Score

0.017EPSS

2021-10-12 11:15 PM
60
cve
cve

CVE-2021-20027

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual...

7.5CVSS

7.6AI Score

0.002EPSS

2021-06-14 11:15 PM
40
4