Lucene search
+L

675 matches found

CNVD
CNVD
added 2024/02/19 12:0 a.m.29 views

SonicWall SonicOS Authorization Issues Vulnerability

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...

9.8CVSS6.7AI score0.00747EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.9 views

The vulnerability of the SSL VPN remote access technology for SonicOS operating systems allows a perpetrator to bypass the authentication process.

The vulnerability of the SSL VPN remote access technology for SonicOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

8.6CVSS7.7AI score0.00747EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/02/08 2:15 a.m.7 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.8CVSS5.8AI score0.00747EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/08 2:15 a.m.36 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.8CVSS9.6AI score0.00747EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/08 1:14 a.m.33 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.7AI score0.00747EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/08 1:14 a.m.129 views

CVE-2024-22394

CVE-2024-22394 affects SonicWall SonicOS SSL-VPN on firmware version 7.1.1-7040. The issue is an improper authentication vulnerability that could allow a remote attacker to bypass authentication under specific conditions. Affected component: SonicOS SSL-VPN feature. Root cause: deficiencies in au...

9.8CVSS9.4AI score0.00747EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/08 12:0 a.m.12 views

SonicWALL SonicOS 授权问题漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...

9.8CVSS6.8AI score0.00747EPSS
SaveExploits0References2
SonicWall
SonicWall
added 2024/02/07 4:44 p.m.47 views

SonicOS SSL-VPN Improper Authentication

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.This issue affects only firmware version SonicOS 7.1.1-7040. CVE: CVE-2024-22394 Last updated: Feb. 7, 2024, 4:44...

8.6CVSS7.2AI score0.00747EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/05 12:0 a.m.161 views

SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

8.8CVSS6.8AI score0.00803EPSS
SaveExploits0References10
GithubExploit
GithubExploit
added 2024/01/12 8:3 p.m.228 views

Exploit for Stack-based Buffer Overflow in Sonicwall Sonicos

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 !example gif...

9.8CVSS9.4AI score0.57591EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/01/10 12:0 a.m.12 views

PT-2024-1608 · Sonicwall · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicWall SonicOS version 7.1.1-7040 Description: An improper authentication vulnerability has been identified in the SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This...

9.8CVSS7.6AI score0.00747EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2023/10/20 12:0 a.m.14 views

The vulnerability of the SonicOS operating system, related to buffer overflows in the stack, allows a hacker to trigger a service failure.

The vulnerability of the SonicOS operating system is related to an overflow in the buffer in the stack at the end of the URL address plainprefs.exp for the SSL VPN. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted HTTP request...

7.7CVSS7AI score0.00803EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/20 12:0 a.m.11 views

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system, which allows a intruder to increase their privileges

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

6.4CVSS7.2AI score0.00654EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/10/17 11:15 p.m.9 views

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

6.5CVSS7.1AI score0.00803EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 11:15 p.m.25 views

CVE-2023-41711

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

6.5CVSS7AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 11:15 p.m.7 views

CVE-2023-41713

SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function...

7.5CVSS7.1AI score0.00593EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 11:15 p.m.5 views

CVE-2023-41711

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

6.5CVSS5.8AI score0.00803EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 11:15 p.m.30 views

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

6.5CVSS7AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 11:15 p.m.6 views

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel...

8.8CVSS7.1AI score0.00654EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 11:15 p.m.13 views

CVE-2023-41713

SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function...

7.5CVSS7.9AI score0.00593EPSS
SaveExploits0References1
Rows per page
Query Builder