SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-39280

creationtimestamp| type| source ---|---|--- 2023-10-18 06:18:59+00:00| seen| https://t.me/cibsecurity/72476...

CVE-2023-39280

CVE-2023-39280 is a post-authentication, stack-based buffer overflow in SonicOS on SonicWall firewalls, triggered via the ssoStats-s.xml and ssoStats-s.wri endpoints, which can cause the firewall to crash. The issue is part of a family of SonicWall SonicOS vulnerabilities (SNWLID-2023-0012) affec...

CVE-2023-39280

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...