Vulnerability fixed in Sonicwall

Due to a vulnerability in SonicOS, a remote malicious party can cause a Denial of Service DoS and potentially execute arbitrary code execute arbitrary code by sending a malicious request to the firewall. SonicWall has released updates to address the vulnerability. fix. For more information, see:...

Critical SonicWall VPN Portal Bug Allows DoS, Worming RCE

UPDATE A critical security bug in the SonicWall VPN portal can be used to crash the device and prevent users from connecting to corporate resources. It could also open the door to remote code execution RCE, researchers said. The flaw CVE-2020-5135 is a stack-based buffer overflow in the SonicWall...

SonicWALL SonicOS Cross-Site Scripting Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A stored cross-site scripting vulnerability exists in the SSLVPN web interface of SonicWALL SonicOS, which can be exploited by a remote, unauthenticated attacker to store and execute arbitrary...

SonicWALL SonicOS Heap Overflow Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A heap overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by a remote, unauthenticated attacker to cause a denial of service of the firewall's SSLVPN service, which can lead...

SonicWALL SonicOS Memory Address Leakage Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A memory address leakage vulnerability exists in SonicWALL SonicOS, which can be exploited by a remote, unauthenticated attacker to cause a denial of service of the firewall SSLVPN service by sendi...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28765)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause a denial of service in SSL-VPN and Proposed Helper Portal, which can lead to a firewall...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28766)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS that can be exploited by a remote, unauthenticated attacker to cause a denial of service of the firewall's SSLVPN service, which can lead...

SonicWALL SonicOS Information Disclosure Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. An information disclosure vulnerability exists in SonicWALL SonicOS, which can be exploited by a remote, unauthenticated attacker to brute-force break the Virtual Assistant Work Order ID in the...

SonicWALL SonicOS Denial of Service Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A denial of service vulnerability exists in the SSLVPN service in SonicWALL SonicOS that originates from the release of an invalid pointer, which can be exploited by an attacker to cause the firewa...

SonicWALL SonicOS Administrator Username Enumeration Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. An administrator username enumeration vulnerability exists in the SSLVPN login page of SonicWALL SonicOS, which can be exploited by a remote, unauthenticated attacker to enumerate the firewall...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28764)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause a denial of service and execute arbitrary code by sending a malicious request to the...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28763)

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause an invalid file reference to go out of bounds, resulting in a firewall crash...

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of...

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of...

Code injection

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of...

CVE-2020-5132

CVE-2020-5132 affects SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature. The issue is a misconfiguration that enables a DNS domain-name collision vulnerability: when internal domain names are exposed on the SSL-VPN authentication page, an attacker aware of internal domain names co...

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of...

Vulnerability fixed in Dell SonicWall

A vulnerability has been fixed in Dell SonicWall. It involves a domain name collision vulnerability. The web interface of SonicWall makes it possible for an attacker to obtain information about domain names used on an organization's internal network. organization. The attacker can register a foun...

SonicWall SSL-VPN Products security misconfiguration leads to possible domain name collision vulnerability

SonicWall SSL-VPN products web interface has the option to publicly display their organization’s internal domain names in the Domain drop-down menu. An attacker with knowledge of an organization’s internal domain name can potentially take advantage of a DNS flaw known as domain name collision.A...

Cloud firewall management API SNAFU put 500k SonicWall customers at risk

TL;DR I found an IDOR in SonicWalls cloud management platform API Any user could add themselves to any account at any organisation using it Anyone could create a user account to exploit the issue, from the public internet Can be used to change firewall rules, or add rogue VPN users, for example...