CVE-2024-40765

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...

CVE-2024-40765

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...

CVE-2024-40765

A remote attacker can exploit an integer-based buffer overflow vulnerability in the IPSec implementation of the SonicOS operating system. By sending a specially crafted IKEv2 payload under specific conditions, an attacker can cause a Denial of Service (DoS) or potentially execute arbitrary code ....

CVE-2024-53706

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...

CVE-2024-53706

The Gen7 SonicOS Cloud platform NSv is affected by a local privilege escalation vulnerability in its SSH configuration function due to insecure privilege management. A remote authenticated local low-privileged attacker can exploit this to elevate privileges to root and potentially achieve arbitra...

CVE-2024-53706

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...

CVE-2024-53705

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...

CVE-2024-53705

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...

CVE-2024-53705

A Server-Side Request Forgery (SSRF) vulnerability exists in the SonicOS SSH management interface used by SonicWall firewall appliances. The flaw stems from insufficient validation of requests on the server side, specifically within the SSH configuration function. A remote attacker can exploit th...

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

CVE-2024-40762

SonicWall SonicOS firewalls (specifically Gen6 and Gen7) are vulnerable to an authentication bypass due to the use of a cryptographically weak Pseudo-Random Number Generator (PRNG) in the SSLVPN authentication token generator. Attackers can predict these tokens to gain unauthorized access to prot...

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS that stems from an integer buffer overflow vulnerability via IPSec, which can be exploited by remote attackers to cause a denial of...

CVE-2024-53705: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS, which stems from a post-authentication absolute path traversal vulnerability that can be exploited by an authenticated remote...

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS that stems from the presence of a stack-based buffer overflow, which can be exploited by an authenticated, remote attacker to crash...

SonicWALL Gen7 SonicOS Cloud platform NSv 安全漏洞

SonicWALL Gen7 SonicOS Cloud platform NSv is a series of virtual firewalls for cloud platforms from SonicWALL USA. A security vulnerability exists in the SonicWALL Gen7 SonicOS Cloud platform NSv SSH. An attacker can exploit the vulnerability to elevate privileges to "root" and potentially lead t...

CVE-2024-40762: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

CVE-2024-40765: Integer Overflow or Wraparound

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload...

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is an operating system designed for SonicWall firewall appliances from SonicWALL Inc. in the United States. A security vulnerability exists in SonicWALL SonicOS that stems from the use of a cryptographically weak pseudo-random number generator PRNG in the authentication token...