CVE-2023-41715

CVE-2023-41715 is the SonicWall SonicOS post-authentication Improper Privilege Management vulnerability affecting the SSL VPN tunnel. The related Nessus/SNWLID-2023-0012 entry confirms a family of post-authentication issues in SonicOS management/web interfaces and SSLVPN portal, with CVE-2023-417...

CVE-2023-41711

CVE-2023-41711 is a post-authentication stack-based buffer overflow in SonicOS affecting the endpoints sonicwall.exp and prefs.exp , causing a firewall crash. A Nessus plugin and vendor PSIRTs enumerate this among multiple SonicWall SonicOS vulnerabilities (SNWLID-2023-0012). Impacts are describe...

CVE-2023-39280

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...

CVE-2023-39280

The SonicOS firmware is affected by a post-authentication Stack-Based Buffer Overflow vulnerability (CWE-121) located in the ssoStats-s.xml and ssoStats-s.wri URL endpoints. Successful exploitation of this vulnerability can lead to a firewall crash , impacting system availability. This issue affe...

CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39278

The SonicOS operating system is vulnerable to a Stack-Based Buffer Overflow (CWE-787/CWE-121) within the main.cgi component. The flaw is triggered by a post-authentication user assertion failure , which can result in a firewall crash . This vulnerability impacts the SonicOS Management Web Interfa...

CVE-2023-39277

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash...

CVE-2023-39277

SonicWall SonicOS is impacted by a post-authentication stack-based buffer overflow vulnerability (CWE-121) affecting the sonicflow.csv and appflowsessions.csv URL endpoints. Exploitation of this vulnerability leads to a firewall crash . This issue affects the SonicOS Management Web Interface and ...

CVE-2023-39276

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...

CVE-2023-39276

SonicWall SonicOS is affected by a post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint. This flaw can lead to a firewall crash . This vulnerability impacts the SonicOS Management Web Interface and SSLVPN Portal, but it does not affect SonicWall S...

CVE-2023-39276: Stack-based Buffer Overflow

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...

PT-2023-26861 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is related to a post-authentication user assertion failure in SonicOS, leading to a Stack-Based Buffer Overflow vulnerability. This vulnerability can be exploited via the main.cgi...

CVE-2023-39278: Stack-based Buffer Overflow

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39280: Stack-based Buffer Overflow

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...

CVE-2023-39279: Stack-based Buffer Overflow

SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash...

PT-2023-26863 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is a post-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml and ssoStats-s.wri URL endpoints, which can lead to a firewall crash. Recommendations: At...

Multiple Vulnerabilities in South River Technologies Titan MFT and Titan SFTP [FIXED]

As part of our continuing research project into managed file transfer risk, including JSCAPE MFT and Fortra Globalscape EFT Server, Rapid7 discovered several vulnerabilities in South River Technologies’ Titan MFT and Titan SFTP servers. Although these require unusual circumstances or non-default...

CVE-2023-45239

A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tacplus to inject shell commands and gain remote code execution on the tacplus server...

PT-2023-29466 · Tac Plus · Tac Plus

Name of the Vulnerable Software and Affected Versions: tac plus versions prior to commit 4fdf178 Description: A lack of input validation exists in tac plus, which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac plu...