675 matches found
CVE-2024-12803
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12805
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12806
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file...
CVE-2024-12806
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file...
CVE-2024-12806
CVE-2024-12806 is a post-authentication absolute path traversal in SonicOS management that allows a remote attacker with high privileges to read arbitrary files on vulnerable devices. The SonicWall PSIRT entry SNWLID-2025-0004 explicitly lists this CVE (as item 3) and notes there is no evidence o...
CVE-2024-12805
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12805
CVE-2024-12805 is a post-authentication format-string vulnerability in SonicOS management affecting SonicWall SonicOS devices. The issue, described in connected sources as a format string flaw, can allow a remote, authenticated attacker to crash the firewall and potentially achieve code execution...
CVE-2024-12805
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12803
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12803
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
CVE-2024-12803
The connected SonicWall advisory confirms CVE-2024-12803 in SonicOS: a post-authentication stack-based buffer overflow in the SonicOS management interface can be exploited remotely over the network to crash the firewall and potentially achieve code execution. Affected: SonicOS management componen...
CVE-2024-53705
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...
CVE-2024-53706
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...
CVE-2024-40762
Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...
CVE-2024-40765
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...
CVE-2024-40765
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...
CVE-2024-40765
Summary: CVE-2024-40765 is an integer-based buffer overflow vulnerability in SonicOS’s IPSec implementation that can be triggered by a crafted IKEv2 payload to cause DoS and potentially arbitrary code execution. Affected software: SonicOS (SonicWall appliances) with IPSec/IKEv2 processing describ...
CVE-2024-53706
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...
CVE-2024-53706
The CVE-2024-53706 issue affects SonicWall Gen7 SonicOS Cloud platform NSv (AWS and Azure editions). It is a Local Privilege Escalation in the SSH configuration function that lets a remote authenticated, low-privileged user elevate to root and potentially execute code. Remediation is available: S...