Lucene search
+L

677 matches found

SonicWall
SonicWall
added 2024/03/12 11:11 p.m.49 views

Integer-Based Buffer Overflow Vulnerability In SonicOS via IPSec

A Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service DoS and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.SonicWall PSIRT is not aware of active exploitation in the wild...

5.3CVSS8.2AI score0.01122EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/23 12:00 a.m.39 views

SonicWall SonicOS Buffer Overflow (SNWLID-2022-0003)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a buffer overflow vulnerability. A Stack-based buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS, which could...

9.8CVSS9.1AI score0.57591EPSS
SaveExploits3References2
CNVD
CNVD
added 2024/02/19 12:00 a.m.29 views

SonicWall SonicOS Authorization Issues Vulnerability

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...

9.8CVSS6.7AI score0.00747EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.9 views

The vulnerability of the SSL VPN remote access technology for SonicOS operating systems allows a perpetrator to bypass the authentication process.

The vulnerability of the SSL VPN remote access technology for SonicOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

8.6CVSS7.7AI score0.00747EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/02/08 2:15 a.m.7 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.8CVSS5.8AI score0.00747EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/08 2:15 a.m.36 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.8CVSS9.6AI score0.00747EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/08 1:14 a.m.33 views

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

9.7AI score0.00747EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/08 1:14 a.m.130 views

CVE-2024-22394

CVE-2024-22394 affects SonicWall SonicOS SSL-VPN on firmware version 7.1.1-7040. The issue is an improper authentication vulnerability that could allow a remote attacker to bypass authentication under specific conditions. Affected component: SonicOS SSL-VPN feature. Root cause: deficiencies in au...

9.8CVSS9.4AI score0.00747EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/08 12:00 a.m.12 views

SonicWALL SonicOS 授权问题漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...

9.8CVSS6.8AI score0.00747EPSS
SaveExploits0References2
SonicWall
SonicWall
added 2024/02/07 4:44 p.m.51 views

SonicOS SSL-VPN Improper Authentication

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.This issue affects only firmware version SonicOS 7.1.1-7040. CVE: CVE-2024-22394 Last updated: Feb. 7, 2024, 4:44...

8.6CVSS7.2AI score0.00747EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/05 12:00 a.m.164 views

SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

8.8CVSS6.8AI score0.00803EPSS
SaveExploits0References10
GithubExploit
GithubExploit
added 2024/01/12 8:03 p.m.230 views

Exploit for Stack-based Buffer Overflow in Sonicwall Sonicos

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 !example gif...

9.8CVSS9.4AI score0.57591EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/01/10 12:00 a.m.12 views

PT-2024-1608 · Sonicwall · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicWall SonicOS version 7.1.1-7040 Description: An improper authentication vulnerability has been identified in the SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This...

9.8CVSS7.6AI score0.00747EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2023/10/20 12:00 a.m.13 views

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system, which allows a intruder to increase their privileges

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

6.4CVSS7.2AI score0.00654EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/20 12:00 a.m.14 views

The vulnerability of the SonicOS operating system, related to buffer overflows in the stack, allows a hacker to trigger a service failure.

The vulnerability of the SonicOS operating system is related to an overflow in the buffer in the stack at the end of the URL address plainprefs.exp for the SSL VPN. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted HTTP request...

7.7CVSS7AI score0.00803EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/10/17 11:15 p.m.9 views

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

6.5CVSS7.1AI score0.00803EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 11:15 p.m.26 views

CVE-2023-41711

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

6.5CVSS7AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 11:15 p.m.8 views

CVE-2023-41713

SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function...

7.5CVSS7.1AI score0.00593EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 11:15 p.m.7 views

CVE-2023-41711

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash...

6.5CVSS5.8AI score0.00803EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 11:15 p.m.31 views

CVE-2023-41712

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...

6.5CVSS7AI score0.00803EPSS
SaveExploits0References1
Rows per page
Query Builder