760 matches found
SonicWALL SonicOS 安全漏洞
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS, which stems from a format string issue that can be exploited by an authenticated, remote attacker to crash the firewall and...
CVE-2024-12806: Path Traversal: '/absolute/pathname/here'
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file...
CVE-2024-12803: Stack-based Buffer Overflow
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...
SonicWALL SonicOS 安全漏洞
SonicWALL SonicOS is an operating system designed for SonicWall firewall appliances from SonicWALL Inc. in the United States. A security vulnerability exists in SonicWALL SonicOS that stems from the use of a cryptographically weak pseudo-random number generator PRNG in the authentication token...
CVE-2024-53706: Improper Privilege Management
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...
SonicWALL SonicOS 安全漏洞
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWall SonicOS that stems from the presence of a server-side request forgery vulnerability. A remote attacker can exploit this vulnerability to...
SonicOS Affected By Multiple Vulnerabilities
1 CVE-2024-40762 - SonicOS SSLVPN Use of Cryptographically Weak Pseudo-Random Number Generator PRNG.Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting ...
SonicOS Multiple Post-authentication Vulnerabilities
1 CVE-2024-12803 - SonicOS Post-authentication Stack-based buffer overflow vulnerabilityA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. CVSS Score: 6.0 CVSS Vector:...
Integer-Based Buffer Overflow Vulnerability In SonicOS via IPSec
A Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.SonicWall PSIRT is not aware of active exploitation in the wild...
PT-2025-1952 · Sonicos · Sonicos
Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. Recommendations: At the moment,...
PT-2025-1012 · Sonicwall · Gen7 Sonicos Cloud Platform Nsv
Name of the Vulnerable Software and Affected Versions: Gen7 SonicOS Cloud platform NSv affected versions not specified Description: The issue is related to insecure privilege management in the configuration function of the SSH cloud platform. It allows a remote authenticated attacker with low...
PT-2025-1016 · Sonicwall · Sonicos
Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logg...
VulnCheck KEV: CVE-2023-0656
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...
VulnCheck KEV: CVE-2022-22274
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall...
Vulnerability fixed in Sonicwall SonicOS
Sonicwall has fixed a vulnerability in SonicOS for Gen5, Gen6 and Gen7 firewalls. The vulnerability is located in the management interface and SSLVPN and allows a malicious party to cause a Denial-of-Service and potentially access and modify system data. The NCSC is receiving signals from trusted...
SonicWall SonicOS Improper Access Control Vulnerability
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash...
SonicWall SonicOS Improper Access Control (SNWLID-2024-0015)
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by an improper access control vulnerability: - An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially...
SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access
SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 CVSS score: 9.3, has been described as an improper access contr...
The vulnerability of the SonicOS operating system’s network interface allows attackers to gain full access to the network interface.
The vulnerability of the SonicOS operating system’s network interface controllers related to SonicWall’s network interface controllers involves access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain full access to the network interface controller...
CVE-2024-40766
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...