CVE-2023-39278

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39279

SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash...

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

PT-2023-26861 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is related to a post-authentication user assertion failure in SonicOS, leading to a Stack-Based Buffer Overflow vulnerability. This vulnerability can be exploited via the main.cgi...

PT-2023-26862 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is a post-authentication Stack-Based Buffer Overflow vulnerability in the "getPacketReplayData.json" URL endpoint, which can cause a firewall crash. Recommendations: At the moment...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the getPacketReplayData.json URL endpoint that causes the firewall...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is an operating system from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints that causes the firewall t...

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

CVE-2023-0656

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...

CVE-2022-22277

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext...

Sonicwall SonicOS 信息泄露漏洞

Sonicwall SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from Sonicwall, Inc. A security vulnerability exists in Sonicwall SonicOS, which stems from a vulnerability in the SNMP service that causes sensitive information about a wireless access point to b...

Sonicwall SonicOS 安全漏洞

Sonicwall SonicWall SonicOS is an operating system from Sonicwall, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in Sonicwall SonicOS, which originates from the Content filtering service CFS returning a large 403-numbered forbidden HTTP response message to the...

CVE-2022-22274

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall...

SonicOS SessionID Buffer Overflow via HTTP response

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service DoS and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 6 and Gen 7 firmware versions. CVE: CVE-2021-20048...

SonicOS Content-Length HTTP Header Stack Overflow Vulnerability

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service DoS and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 6 and Gen 7 firmware versions. CVE:...

Vulnerability fixed in SonicOS

SonicWall has fixed a vulnerability in SonicOS. A malicious party could potentially exploit the vulnerability to send a user on the vulnerable SonicWall system via a header redirection to a rogue website under the control of the malicious party's control. However, the rogue website and the...

SonicOS Host Header Redirection

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains. To avoid this vulnerability, follow these steps: Upgrade the firmware to the fixed version 6.5.4.8-89n, 7.0.1-R1456 etc. and higher versions,Enab...

The vulnerability of the SonicOS operating systems lies in the lack of a mechanism to check the size of copied data. This allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the SonicOS operating system is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure by using a specially created malicious request...

CVE-2021-20019

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...

Vulnerability fixed in SonicWall SonicOS

A vulnerability has been fixed in SonicOS. The vulnerability allows an unauthenticated malicious party to obtain system information through a malicious http request to obtain system information. SonicWall categorizes this vulnerability according to the CVSSv3 method with a score of 5.3. SonicWall...