SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-39278

The SonicOS operating system is vulnerable to a Stack-Based Buffer Overflow (CWE-787/CWE-121) within the main.cgi component. The flaw is triggered by a post-authentication user assertion failure , which can result in a firewall crash . This vulnerability impacts the SonicOS Management Web Interfa...