SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

CVE-2023-41712

CVE-2023-41712 is a post-authentication stack-based buffer overflow vulnerability in SonicWall SonicOS SSL VPN handling of the plainprefs.exp URL, which can cause a firewall crash. Affected product: SonicWall/SonicOS management web interface and SSL VPN portal (not SMA100/SMA1000 per Nessus notes...