SonicWALL SonicOS Use of Externally-Controlled Format String (CVE-2026-0400)

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

EUVD-2000-1083

Malware in sbrugna...

CVE-2024-40766

CVE-2024-40766 affects SonicWall SonicOS on Gen5/Gen6 and Gen7 (SonicOS ≤ 7.0.1-5035) with improper access control in management access and SSLVPN, enabling unauthorized resource access and, in some cases, a firewall crash. Public sources confirm exploitation activity in the wild (CISA KEV catalo...

SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a security misconfiguration vulnerability, due to improper restriction of excessive MFA attempts in the SonicOS SSLVPN interface, which may allow a remote authenticated attack...

SonicOS Unauthenticated Stack-Based Buffer Overflow Vulnerability

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash.SonicWall PSIRT is not aware of active exploitation in the wild. No reports of a PoC have been made public and...

Feds: Zeppelin Ransomware Resurfaces with New Compromise, Encryption Tactics

Zeppelin ransomware is back and employing new compromise and encryption tactics in its recent campaigns against various vertical industries—particularly healthcare—as well as critical infrastructure organizations, the feds are warning. Threat actors deploying the ransomware as a service RaaS are...

Sonicwall SonicOS 信息泄露漏洞

Sonicwall SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from Sonicwall, Inc. A security vulnerability exists in Sonicwall SonicOS, which stems from a vulnerability in the SNMP service that causes sensitive information about a wireless access point to b...

The vulnerability of SonicWall SMA series 100 network firewall microprogramming software, related to the lack of protection for SQL query structures, allows attackers to gain unauthorized access to protected information.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

SonicWall SonicOS 缓冲区错误漏洞

Sonicwall SonicWall SonicOS is the United States SonicWall Sonicwall company's set of operating system designed specifically for SonicWall firewall appliances. A security vulnerability exists in SonicOS that can be exploited by remote attackers to cause a denial of service DoS by sending a...

2021. The age of the super vulnerability?

I don’t know about you, but to me it seems that every week we are seeing another vulnerability that not only grants significant access to the vulnerable system but also more widely internally. This last week we have seen the latest round of Microsoft Exchange vulnerabilities. The April 2021 updat...

SonicWall Firewall Detection

Binary data 3619.prm...

Some of the port mapping data collection-vulnerability warning-the black bar safety net

SONICWALL Firewall with port forwarding SonicWall Firewall with port forwarding process is as follows: To set upa Web serveras an example, assume that theWeb serverwithin the network IP is 1 9 2. 1 6 8. 0. 5 0 First log in to the firewall, select“Access", and then look at the default first...

SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SonicWall Firewall/VPN Appliance www.sonicwall.com Product History: SonicWALL's family of Internet security appliances provide the first line of defense against Internet security threats. They include an ICSA- certified, stateful packet inspection...

CVE-2001-0376

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...

Дырка в фаерволах Sonicwall

Переполнения буфера в различных параметрах...