SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-41711

CVE-2023-41711 is a post-authentication stack-based buffer overflow in SonicOS affecting the endpoints sonicwall.exp and prefs.exp , causing a firewall crash. A Nessus plugin and vendor PSIRTs enumerate this among multiple SonicWall SonicOS vulnerabilities (SNWLID-2023-0012). Impacts are describe...