SonicOS affected by multiple vulnerabilities

The SonicOS Management web interface and SSLVPN portal have been impacted by several vulnerabilities, which are listed below. SonicWall strongly advises organizations using earlier versions of SonicOS firmware to upgrade to the latest firmware releases.Note: It's important to note that the...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the SSL VPN plainprefs.exp URL endpoint that causes the firewall t...

CVE-2023-42507: Out-of-bounds Write

Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially crafted OnSinView2 project file...

CVE-2023-41712: Stack-based Buffer Overflow

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

CVE-2023-39278: Stack-based Buffer Overflow

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash...

CVE-2023-39276: Stack-based Buffer Overflow

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...

PT-2023-26862 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is a post-authentication Stack-Based Buffer Overflow vulnerability in the "getPacketReplayData.json" URL endpoint, which can cause a firewall crash. Recommendations: At the moment...

PT-2023-26861 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: The issue is related to a post-authentication user assertion failure in SonicOS, leading to a Stack-Based Buffer Overflow vulnerability. This vulnerability can be exploited via the main.cgi...

CVE-2023-39280: Stack-based Buffer Overflow

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash...

CVE-2023-39279: Stack-based Buffer Overflow

SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash...

CVE-2023-41711: Stack-based Buffer Overflow

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the getPacketReplayData.json URL endpoint that causes the firewall...

PT-2023-26860

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is a post-authentication stack-based buffer overflow vulnerability in the "sonicflow.csv" and "appflowsessions.csv" URL endpoints, which can lead to a firewall crash. Recommendation...

PT-2023-6211

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is related to a post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN "plainprefs.exp" URL endpoint. This vulnerability can be exploited by a remote attacker...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is an operating system from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints that causes the firewall t...

CVE-2023-39277: Stack-based Buffer Overflow

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash...

SonicWALL SonicOS Buffer Error Vulnerability

SonicWALL SonicOS is a set of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the sonicwall.exp, prefs.exp URL endpoints that causes the firewall ...

PT-2023-26859

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is a post-authentication stack-based buffer overflow in the "getBookmarkList.json" URL endpoint, which can cause a firewall crash. Recommendations At the moment, there is no...

CVE-2023-21414: Stack-based Buffer Overflow

NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : MediaInfoLib vulnerabilities (USN-5237-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5237-1 advisory. It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issu...