CVE-2023-5748

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors...

CVE-2023-5748

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors...

CVE-2023-5748

CVE-2023-5748 affects Synology SSL VPN Client prior to 1.4.7-0687. A buffer copy without input size checking in the CGI component enables local users to cause a denial-of-service. Remediation: upgrade to 1.4.7-0687 or later. Other connected sources corroborate the CGI-based buffer overflow issue ...

PT-2023-32302 · Synology · Synology Ssl Vpn Client

Name of the Vulnerable Software and Affected Versions: Synology SSL VPN Client versions prior to 1.4.7-0687 Description: The issue is related to a buffer copy without checking the size of the input, which is a 'Classic Buffer Overflow' vulnerability in the cgi component. This allows local users t...

CVE-2023-5748: Buffer Copy without Checking Size of Input

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors...

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

Stack overflow

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

CVE-2023-41715

CVE-2023-41715 is the SonicWall SonicOS post-authentication Improper Privilege Management vulnerability affecting the SSL VPN tunnel. The related Nessus/SNWLID-2023-0012 entry confirms a family of post-authentication issues in SonicOS management/web interfaces and SSLVPN portal, with CVE-2023-417...

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

CVE-2023-41712

CVE-2023-41712 is a post-authentication stack-based buffer overflow vulnerability in SonicWall SonicOS SSL VPN handling of the plainprefs.exp URL, which can cause a firewall crash. Affected product: SonicWall/SonicOS management web interface and SSL VPN portal (not SMA100/SMA1000 per Nessus notes...

PT-2023-6212

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is related to improper privilege management in the SonicOS SSL VPN Tunnel, allowing users to elevate their privileges inside the tunnel. This can be exploited by a remote attacker t...

PT-2023-6211

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is related to a post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN "plainprefs.exp" URL endpoint. This vulnerability can be exploited by a remote attacker...

CVE-2023-41712: Stack-based Buffer Overflow

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

CVE-2023-41715: Improper Privilege Management

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

Fortinet Fortigate Plain-text credentials in GET request via SSL VPN web portal (FG-IR-23-120)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-120 advisory. - A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 an...

Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol

Microsoft disclosed 104 vulnerabilities in its extensive range of software and services, the most in a single Patch Tuesday since July. What is most notable is that this batch of vulnerabilities includes 12 that are considered "critical," nine of which are remote code execution vulnerabilities in...