Lucene search
+L

675 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/09/12 12:0 a.m.5 views

VulnCheck KEV: CVE-2022-22274

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall...

9.8CVSS7.9AI score0.57591EPSS
SaveExploits3References1
NCSC
NCSC
added 2024/09/10 12:34 p.m.9 views

Vulnerability fixed in Sonicwall SonicOS

Sonicwall has fixed a vulnerability in SonicOS for Gen5, Gen6 and Gen7 firewalls. The vulnerability is located in the management interface and SSLVPN and allows a malicious party to cause a Denial-of-Service and potentially access and modify system data. The NCSC is receiving signals from trusted...

9.8CVSS7.2AI score0.18177EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2024/09/09 12:0 a.m.34 views

SonicWall SonicOS Improper Access Control Vulnerability

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash...

9.8CVSS7AI score0.18177EPSS
SaveIn wildExploits0
Tenable Nessus
Tenable Nessus
added 2024/09/09 12:0 a.m.56 views

SonicWall SonicOS Improper Access Control (SNWLID-2024-0015)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by an improper access control vulnerability: - An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially...

9.8CVSS8.6AI score0.18177EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2024/08/26 2:33 p.m.28 views

SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 CVSS score: 9.3, has been described as an improper access contr...

7.2AI score0.18177EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.12 views

The vulnerability of the SonicOS operating system’s network interface allows attackers to gain full access to the network interface.

The vulnerability of the SonicOS operating system’s network interface controllers related to SonicWall’s network interface controllers involves access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain full access to the network interface controller...

9.9CVSS8.1AI score0.18177EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/08/23 7:15 a.m.55 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS0.18177EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/23 7:15 a.m.5 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS5.7AI score0.18177EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/23 6:19 a.m.84 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

0.18177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/23 6:19 a.m.175 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

7AI score0.18177EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/23 6:19 a.m.562 views

CVE-2024-40766

CVE-2024-40766 affects SonicWall SonicOS on Gen5/Gen6 and Gen7 (SonicOS ≤ 7.0.1-5035) with improper access control in management access and SSLVPN, enabling unauthorized resource access and, in some cases, a firewall crash. Public sources confirm exploitation activity in the wild (CISA KEV catalo...

9.8CVSS6.7AI score0.18177EPSS
SaveIn wildExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/08/23 12:0 a.m.55 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS9.6AI score0.18177EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
added 2024/08/23 12:0 a.m.8 views

SonicWALL SonicOS 访问控制错误漏洞

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. An access control error vulnerability exists in SonicWALL SonicOS version 7.0.1-5035 and prior versions, which originates from allowing unauthorized access to resources and can cause...

9.8CVSS9.5AI score0.18177EPSS
SaveExploits0References2
SonicWall
SonicWall
added 2024/08/22 6:43 p.m.13 views

SonicOS Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Gen 5 and Gen 6 devices, as well as Gen 7...

9.3CVSS9.7AI score0.18177EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/08/22 12:0 a.m.6 views

PT-2024-5748

Name of the Vulnerable Software and Affected Versions SonicWall Firewall Gen 5 affected versions not specified SonicWall Firewall Gen 6 affected versions not specified SonicWall SonicOS versions prior to 7.0.1-5035 Description An improper access control issue exists in the SonicWall SonicOS...

9.8CVSS7.3AI score0.18177EPSS
SaveExploits0References387
CNVD
CNVD
added 2024/07/24 12:0 a.m.35 views

SonicWALL SonicOS IPSec VPN Buffer Overflow Vulnerability

SonicWALL SonicOS IPSec VPN is a VPN solution from SonicWALL USA. SonicWALL SonicOS IPSec VPN suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could exploit the vulnerability to cause a programmati...

7.5CVSS7.3AI score0.007EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:0 a.m.13 views

The vulnerability of the IPSec VPN protocol implementation in the SonicOS operating system, related to buffer overflows in dynamic memory, allows a attacker to cause a service failure.

The vulnerability of the IPSec VPN protocol implementation in the SonicOS operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.5AI score0.007EPSS
SaveExploits0References2Affected Software1
NCSC
NCSC
added 2024/07/18 12:25 p.m.16 views

Vulnerability fixed in SonicOS

A vulnerability has been fixed in SonicWall SonicOS IPSec. The vulnerability in SonicWall SonicOS IPSec allows an unauthenticated remote malicious person to cause Denial of Service DoS. SonicWall has made available a workaround and patch to fix the vulnerability. See the reference for more...

7.5CVSS6.9AI score0.007EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/18 8:15 a.m.33 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5CVSS0.007EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/18 8:15 a.m.6 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5CVSS6.1AI score0.007EPSS
SaveExploits0References1
Rows per page
Query Builder