SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-39276

CVE-2023-39276 is a post-authentication stack-based buffer overflow in SonicOS’ getBookmarkList.json endpoint that can crash affected SonicWall firewalls. The Nessus/SNWLID-2023-0012 notes this as part of multiple vulnerabilities affecting SonicOS Management Web Interface and SSLVPN Portal, with ...

CVE-2023-39276

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash...