SonicWall SonicOS Buffer Overflow Vulnerability (CNVD-2022-06901)

A buffer overflow vulnerability exists in SonicWall SonicOS, an operating system designed for SonicWall firewall appliances from SonicWall, Inc. response header boundary. A remote, unauthenticated attacker could use this vulnerability to send a special HTTP response that triggers a stack-based...

Vulnerabilities fixed in SonicOS

SonicWall has fixed two vulnerabilities in SonicOS. A remote malicious party could potentially exploit the vulnerabilities to cause a denial-of-service or execute arbitrary code execute arbitrary code on the underlying system with the privileges of the logged-in user. To accomplish this, the...

SonicWall SonicOS 缓冲区错误漏洞

Sonicwall SonicOS is an operating system designed for SonicWall firewall appliances from SonicWall USA. A security vulnerability exists in SonicWall SonicOS that originates from a boundary error in the system's handling of HTTP Content-Length response headers. A remote, unauthenticated attacker...

SonicWall SonicOS 缓冲区错误漏洞

A buffer overflow vulnerability exists in SonicWall SonicOS, an operating system designed for SonicWall firewall appliances from SonicWall, Inc. response header boundary. A remote, unauthenticated attacker could use this vulnerability to send a special HTTP response that triggers a stack-based...

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions...

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions...

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions...

Code injection

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions...

CVE-2021-20049

CVE-2021-20049 affects SonicWall SMA100, where the password change API can be probed by an unauthenticated remote attacker to enumerate usernames based on server responses. Affected versions include 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x releases. The core issue is non-defensive handling o...

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions...

SonicWall SMA100 Information Disclosure Vulnerability

Sonicwall SMA100 is a secure access gateway appliance from Sonicwall U.S.A. A security vulnerability exists in SonicWall SMA100, which allows an attacker to enumerate usernames through the vulnerability...

Vulnerability fixed in SonicWall SMA100 series

A vulnerability has been fixed in SonicWall SMA100 series. The vulnerability allows an unauthenticated remote malicious person able to access some management APIs in order to view meta-data of configurations. SonicWall has released updates to fix the vulnerability. fix. More information can be...

JMSAppender - Log4j 1.2 Vulnerability CVE-2021-4104

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...

SonicWall SMA100 API username enumeration vulnerability

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability affected 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions. CVE: CVE-2021-20049 Last updated: Dec. 21, 202...

SonicWALL SMA100 安全漏洞

The SonicWALL SMA100 is a secure access gateway device from SonicWALL, Inc. A security vulnerability exists in the SonicWALL SMA100 that can be exploited by an attacker to gain unauthorized access to other restricted features...

Sonicwall SMA100 信息泄露漏洞

Sonicwall SMA100 is a secure access gateway appliance from Sonicwall U.S.A. A security vulnerability exists in SonicWall SMA100, which allows an attacker to enumerate usernames through the vulnerability...

The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insecure privilege management. This allows attackers to create accounts with administrator privileges.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow a malicious actor to create an administrator-account using a specially crafted HTTP request...

The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to incorrect path name restrictions in access-controlled directories. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

The software for email security solutions from SonicWall, such as SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insufficient file checking during loading. This allows attackers to gain unauthorized access to protected information.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software lies in insufficient file checking during the loading process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by downloading a malicious ZIP archive...

SonicWall SMA100 has an unspecified vulnerability

The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 that could be exploited by an unauthenticated remote attacker to bypass firewall rules by using the SMA100 as an unexpected proxy or intermediate undetectable pro...