SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-39277

CVE-2023-39277 is a SonicWall SonicOS post-authentication stack-based buffer overflow affecting the sonicflow.csv and appflowsessions.csv endpoints, which can cause a firewall crash. The Nessus/NVD entries describe it as one of multiple stack-based overflow issues in SonicOS management web interf...