2003 matches found
CVE-2024-53702
Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...
CVE-2024-45319
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...
CVE-2024-45319
The CVE-2024-45319 entry concerns SonicWall SMA100 SSLVPN. Affects firmware 10.2.1.13-72sv and earlier. The vulnerability allows a remote authenticated attacker to bypass the certificate requirement during authentication, potentially leading to unauthorized access. The SonicWall SNWLID-2024-0018 ...
CVE-2024-45319
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...
CVE-2024-45318
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-45318
CVE-2024-45318 affects SonicWall SMA100 SSLVPN web management interface. A stack-based buffer overflow vulnerability in this component can lead to remote code execution. Public documents confirm this issue alongside related flaws (e.g., CVE-2024-40763, CVE-2024-53703) within the SMA100/SMA200 fam...
CVE-2024-45318
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution...
CVE-2024-40763
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution...
CVE-2024-40763
CVE-2024-40763 affects SonicWall SMA100 SSLVPN. The issue is a heap-based buffer overflow caused by the use of strcpy in the SMA100, allowing remote authenticated attackers to potentially execute code. Nessus/NCSC references corroborate multiple related vulnerabilities and identify the SMA200/210...
CVE-2024-40763
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution...
PT-2024-35812 · Sonicwall +1 · Sonicwall Sma100 Sslvpn +1
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 SSLVPN versions 10.2.1.13-72sv and earlier Description: A problem in the mod httprp library loaded by the Apache web server allows remote attackers to cause a stack-based buffer overflow, potentially leading to code execution...
SonicWALL SMA100 安全漏洞
The SonicWALL SMA100 is a security access gateway device from SonicWALL USA. A security vulnerability exists in the SonicWALL SMA100. An authenticated, remote attacker could exploit the vulnerability to bypass certificate requirements during authentication...
SonicWALL SMA100 安全漏洞
The SonicWALL SMA100 is a secure access gateway device from SonicWALL, Inc. A security vulnerability exists in the SonicWALL SMA100 that stems from the web-based management interface containing a vulnerability. Exploitation of the vulnerability by a remote attacker could trigger a stack-based...
SonicWALL SMA100 安全漏洞
The SonicWALL SMA100 is a secure access gateway device from SonicWALL, Inc. A security vulnerability exists in the SonicWALL SMA100 that stems from a flaw in the modhttprp library loaded by the Apache web server. Exploitation of this vulnerability by a remote attacker could cause a stack-based...
SonicWALL SMA100 安全漏洞
The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL USA. The SonicWALL SMA100 suffers from a cryptographic issue vulnerability that stems from the use of a weakly encrypted pseudo-random number generator in the backup code generator. An attacker could exploit the vulnerabilit...
SonicWall SMA100 SSL-VPN Affected By Multiple Vulnerabilities
1 Path traversal vulnerability – attributed to publicly known Apache HTTP Server vulnerability CVE-2024-38475Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to file system locations that are permitted to be served by the server. CV...
NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise
Cybersecurity researchers have disclosed a set of flaws impacting Palo Alto Networks and SonicWall virtual private network VPN clients that could be potentially exploited to gain remote code execution on Windows and macOS systems. "By targeting the implicit trust VPN clients place in servers,...
PT-2024-9236 · Sonicwall · Sonicwall Sma100 Sslvpn
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 SSLVPN versions prior to 10.2.1.13-72sv Description: The issue is related to a heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN, caused by the use of strcpy. This allows remote authenticated attackers t...
PT-2024-9234 · Sonicwall · Sonicwall Sma100
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 series affected versions not specified Description: The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG in the SonicWall SMA100 SSLVPN backup code generator. This weakness can be...
