Lucene search
+L

760 matches found

OSV
OSV
•added 2024/08/23 7:15 a.m.•8 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS8AI score0.18379EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/23 6:19 a.m.•92 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

0.18379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/23 6:19 a.m.•182 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

8AI score0.18379EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/23 6:19 a.m.•599 views

CVE-2024-40766

CVE-2024-40766 affects SonicWall SonicOS on Gen5/Gen6 and Gen7 (SonicOS ≤ 7.0.1-5035) with improper access control in management access and SSLVPN, enabling unauthorized resource access and, in some cases, a firewall crash. Public sources confirm exploitation activity in the wild (CISA KEV catalo...

9.8CVSS8AI score0.18379EPSS
SaveIn wildExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/08/23 12:00 a.m.•15 views

SonicWALL SonicOS 访问控制错误漏洞

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. An access control error vulnerability exists in SonicWALL SonicOS version 7.0.1-5035 and prior versions, which originates from allowing unauthorized access to resources and can cause...

9.8CVSS8.2AI score0.18379EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/08/23 12:00 a.m.•59 views

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS7.8AI score0.18379EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/23 12:00 a.m.•2 views

CVE-2024-40766: Improper Access Control

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7...

9.8CVSS8AI score0.18379EPSS
SaveExploits0References4
SonicWall
SonicWall
•added 2024/08/22 6:43 p.m.•28 views

SonicOS Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Gen 5 and Gen 6 devices, as well as Gen 7...

9.3CVSS7.9AI score0.18379EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/08/22 12:00 a.m.•12 views

PT-2024-5748

Name of the Vulnerable Software and Affected Versions SonicWall Firewall Gen 5 and Gen 6 SonicOS versions prior to 7.0.1-5035 Description An improper access control issue exists in the SonicWall SonicOS management access. This flaw allows a remote attacker to gain unauthorized access to resources...

9.8CVSS7.9AI score0.18379EPSS
SaveExploits0References392
CNVD
CNVD
•added 2024/07/24 12:00 a.m.•46 views

SonicWALL SonicOS IPSec VPN Buffer Overflow Vulnerability

SonicWALL SonicOS IPSec VPN is a VPN solution from SonicWALL USA. SonicWALL SonicOS IPSec VPN suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could exploit the vulnerability to cause a programmati...

7.5CVSS7.3AI score0.007EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/07/22 12:00 a.m.•17 views

The vulnerability of the IPSec VPN protocol implementation in the SonicOS operating system, related to buffer overflows in dynamic memory, allows a attacker to cause a service failure.

The vulnerability of the IPSec VPN protocol implementation in the SonicOS operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.5AI score0.007EPSS
SaveExploits0References2Affected Software1
NCSC
NCSC
•added 2024/07/18 12:25 p.m.•21 views

Vulnerability fixed in SonicOS

A vulnerability has been fixed in SonicWall SonicOS IPSec. The vulnerability in SonicWall SonicOS IPSec allows an unauthenticated remote malicious person to cause Denial of Service DoS. SonicWall has made available a workaround and patch to fix the vulnerability. See the reference for more...

7.5CVSS6.9AI score0.007EPSS
SaveExploits0References2
NVD
NVD
•added 2024/07/18 8:15 a.m.•45 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5CVSS0.007EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/18 8:15 a.m.•12 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5CVSS6.1AI score0.007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/18 7:42 a.m.•35 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5AI score0.007EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/18 7:42 a.m.•119 views

CVE-2024-40764

CVE-2024-40764 affects SonicOS IPSec VPN (SonicWall/SonicOS). The issue is a heap-based buffer overflow caused by a boundary error when processing untrusted input in the IPSec VPN implementation, allowing an unauthenticated remote attacker to trigger a Denial of Service. Multiple sources corrobor...

7.5CVSS7.5AI score0.007EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/07/18 7:42 a.m.•378 views

CVE-2024-40764

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

0.007EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/18 12:00 a.m.•17 views

SonicWALL SonicOS IPSec VPN 安全漏洞

SonicWALL SonicOS IPSec VPN is a VPN solution from SonicWALL USA. SonicWALL SonicOS IPSec VPN suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could exploit the vulnerability to cause a programmati...

7.5CVSS7.1AI score0.007EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•4 views

CVE-2024-40764: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service DoS...

7.5CVSS7.5AI score0.007EPSS
SaveExploits0References1
SonicWall
SonicWall
•added 2024/07/17 4:52 p.m.•53 views

Heap-based buffer overflow vulnerability in SonicOS IPSec VPN

Heap-based buffer overflow vulnerability in the SonicOS IPSec allows an unauthenticated remote attacker to cause Denial of Service DoS. CVE: CVE-2024-40764 Last updated: Aug. 5, 2024, 9:37 p.m...

7.5CVSS7.5AI score0.007EPSS
SaveExploits0
Rows per page
Query Builder