675 matches found
SonicWALL SonicOS SSLVPN 代码问题漏洞
SonicWALL SonicOS SSLVPN is a virtual private network for secure remote access from SonicWALL USA. A code issue vulnerability exists in SonicWALL SonicOS SSLVPN that originates from a null pointer dereference in the SSLVPN virtual office interface, which could result in a denial of service...
SonicWall SonicOS SSLVPN Authentication Bypass
SonicWall SonicOS SSLVPN versions 7.1.1-7040 prior to 7.1.3-7015 and version 7.1.2-7019 are vulnerable to authentication bypass via a specially forged request that allows to hijack active SSL VPN sessions and gain unauthorized network access. No source data...
SonicWall SonicOS Privilege Escalation (CVE-2024-53706) (SNWLID-2025-0003)
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a privilege escalation vulnerability. The vulnerability allows a remote authenticated local low-privileged attacker to elevate privileges to 'root' and potentially lead to cod...
SonicWall SonicOS SSRF (CVE-2024-53705) (SNWLID-2025-0003)
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by an SSRF vulnerability in the SonicOS SSH management interface. The vulnerability allows a remote attacker to establish a TCP connection to an IP address on any port when the...
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2025-0003)
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities: - Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can ...
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication...
VulnCheck KEV: CVE-2024-53704
SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication...
The vulnerability of the SSL VPN remote access technology for SonicOS operating systems allows a hacker to increase their privileges.
The vulnerability of the SSL VPN remote access technology implemented on SonicOS is related to the bypassing of authentication due to a fundamental error in the implementation. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of the SSL VPN remote access technology implemented on SonicOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SSL VPN remote access technology implemented on SonicOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SSH configuration function on the NSv Gen7 SonicOS Cloud cloud platform allows a hacker to elevate privileges to the root level and execute arbitrary code.
The vulnerability of the SSH configuration function on the NSv Gen7 SonicOS Cloud cloud platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate privileges to the root level and execute arbitrary code...
The vulnerability of the SSH configuration function on SonicOS operating systems allows a hacker to perform an SSRF attack.
The vulnerability of the SSH configuration function in SonicOS operating systems is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Unspecified Vulnerability in SonicWALL SonicOS (CNVD-2025-01660)
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWall SonicOS that stems from the presence of a server-side request forgery vulnerability. A remote attacker can exploit this vulnerability to...
The vulnerability of the SSL VPN remote access technology implemented on SonicOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SSL VPN remote access technology implemented on SonicOS operating systems is related to the use of a insecure random number generator program. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability in the implementation of IPSec protocols on the SonicOS operating system allows a attacker to trigger a Denial-of-Service attack (DoS) or execute arbitrary code.
The vulnerability of the implementation of IPSec protocols on the SonicOS operating system is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack or execute arbitrary code by sending a specially crafted IKEv2...
Unspecified Vulnerability in SonicWall SonicOS (CNVD-2025-01663)
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS, which stems from a post-authentication absolute path traversal vulnerability that can be exploited by an authenticated remote...
Unspecified Vulnerability in SonicWall SonicOS (CNVD-2025-01661)
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS, which stems from a format string issue that can be exploited by an authenticated, remote attacker to crash the firewall and...
Unspecified Vulnerability in SonicWall SonicOS (CNVD-2025-01662)
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS that stems from an integer buffer overflow vulnerability via IPSec, which can be exploited by remote attackers to cause a denial of...
SonicWall SonicOS Stack Overflow Vulnerability
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS that stems from the presence of a stack-based buffer overflow, which can be exploited by an authenticated, remote attacker to crash...
CVE-2024-40765
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...