419 matches found
CVE-2024-53703
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions modhttprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-53703
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions modhttprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-53702
The SonicWall SMA100 secure access gateway suffers from a cryptographic vulnerability due to the use of a weak pseudo-random number generator (PRNG) in the backup code generator. An attacker could potentially predict the generated secret, leading to the disclosure of protected information or the ...
CVE-2024-53702
Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...
CVE-2024-53702
Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...
CVE-2024-45319
A vulnerability in the SonicWall SMA100 SSLVPN (specifically firmware versions 10.2.1.13-72sv and earlier) allows a remote authenticated attacker to circumvent the certificate requirement during authentication. This flaw is associated with CWE-798: Use of Hard-coded Credentials . Affected product...
CVE-2024-45319
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...
CVE-2024-45319
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...
CVE-2024-45318
A stack-based buffer overflow vulnerability exists in the SonicWall SMA100 SSLVPN web management interface. This flaw allows remote attackers to trigger a buffer overflow, which could potentially lead to arbitrary code execution . Affected firmware versions include 10.2.1.13-72sv and earlier. Son...
CVE-2024-45318
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-45318
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-40763
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution...
CVE-2024-40763
A heap-based buffer overflow vulnerability exists in the SonicWall SMA100 SSLVPN due to the improper use of the strcpy function. This flaw allows remote authenticated attackers to trigger a heap-based buffer overflow, which may lead to arbitrary code execution and unauthorized access to sensitive...
CVE-2024-40763
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution...
CVE-2024-45318: Stack-based Buffer Overflow
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-40763: Heap-based Buffer Overflow
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution...
PT-2024-31570
Name of the Vulnerable Software and Affected Versions SonicWall SMA100 SSLVPN firmware versions 10.2.1.13-72sv and earlier Description A vulnerability in the SonicWall SMA100 SSLVPN firmware allows a remote authenticated attacker to circumvent the certificate requirement during authentication. Th...
CVE-2024-53702: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...
CVE-2024-45319: Use of Hard-coded Credentials
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...
