CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

Stack overflow

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash...

Stack overflow

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...

Stack overflow

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

Stack overflow

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

Stack overflow

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...

CVE-2023-41715

CVE-2023-41715 is the SonicWall SonicOS post-authentication Improper Privilege Management vulnerability affecting the SSL VPN tunnel. The related Nessus/SNWLID-2023-0012 entry confirms a family of post-authentication issues in SonicOS management/web interfaces and SSLVPN portal, with CVE-2023-417...

CVE-2023-41711

CVE-2023-41711 is a post-authentication stack-based buffer overflow in SonicOS affecting the endpoints sonicwall.exp and prefs.exp , causing a firewall crash. A Nessus plugin and vendor PSIRTs enumerate this among multiple SonicWall SonicOS vulnerabilities (SNWLID-2023-0012). Impacts are describe...

CVE-2023-39280

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...

CVE-2023-39280

CVE-2023-39280 is a post-authentication, stack-based buffer overflow in SonicOS on SonicWall firewalls, triggered via the ssoStats-s.xml and ssoStats-s.wri endpoints, which can cause the firewall to crash. The issue is part of a family of SonicWall SonicOS vulnerabilities (SNWLID-2023-0012) affec...

CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39278

CVE-2023-39278 is a SonicOS vulnerability in which a post-authentication user assertion failure in main.cgi leads to a Stack-Based Buffer Overflow and a firewall crash. The connected sources corroborate that SonicOS Management Web Interface and SSLVPN portal are affected by multiple related post-...

CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39277

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash...

CVE-2023-39277

CVE-2023-39277 is a SonicWall SonicOS post-authentication stack-based buffer overflow affecting the sonicflow.csv and appflowsessions.csv endpoints, which can cause a firewall crash. The Nessus/NVD entries describe it as one of multiple stack-based overflow issues in SonicOS management web interf...

CVE-2023-39276

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...

CVE-2023-39276

CVE-2023-39276 is a post-authentication stack-based buffer overflow in SonicOS’ getBookmarkList.json endpoint that can crash affected SonicWall firewalls. The Nessus/SNWLID-2023-0012 notes this as part of multiple vulnerabilities affecting SonicOS Management Web Interface and SSLVPN Portal, with ...

PT-2023-26863 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is a post-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml and ssoStats-s.wri URL endpoints, which can lead to a firewall crash. Recommendations: At...

PT-2023-26861 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is related to a post-authentication user assertion failure in SonicOS, leading to a Stack-Based Buffer Overflow vulnerability. This vulnerability can be exploited via the main.cgi...

Multiple Vulnerabilities in South River Technologies Titan MFT and Titan SFTP [FIXED]

As part of our continuing research project into managed file transfer risk, including JSCAPE MFT and Fortra Globalscape EFT Server, Rapid7 discovered several vulnerabilities in South River Technologies’ Titan MFT and Titan SFTP servers. Although these require unusual circumstances or non-default...