CVE-2024-3596

Summary: CVE-2024-3596 is a forgery vulnerability in RADIUS (RFC 2865) where a local attacker can modify a valid RADIUS response to another response using a chosen-prefix collision against MD5. The vulnerability is associated with FreeRADIUS and is covered in multiple advisories (ALAS/ALSA) confi...

CVE-2020-5135

CVE-2020-5135 is a buffer overflow in SonicOS affecting multiple releases (Gen 6: 6.5.4.7, 6.5.1.12, 6.0.5.3; SonicOSv: 6.5.4.v; Gen 7: 7.0.0.0). The vulnerability allows a remote attacker to cause Denial of Service and potentially execute arbitrary code by sending a malicious request to affected...

CVE-2021-3449

CVE-2021-3449 affects OpenSSL 1.1.1.x where a TLSv1.2 server may crash (DoS) if it receives a renegotiation ClientHello that omits the signature_algorithms extension but includes signature_algorithms_cert. The issue is a NULL pointer dereference leading to a denial of service; OpenSSL clients are...

CVE-2021-3450

CVE-2021-3450 affects OpenSSL 1.1.1h–1.1.1j where a bug in the X509_V_FLAG_X509_STRICT path overwrote a prior CA-check result, bypassing the non-CA certificates prohibition unless a programmed purpose is used. When a purpose is configured, the certificate chain is still rejected; the issue is fix...

CVE-2024-40766

CVE-2024-40766 affects SonicWall SonicOS on Gen5/Gen6 and Gen7 (SonicOS ≤ 7.0.1-5035) with improper access control in management access and SSLVPN, enabling unauthorized resource access and, in some cases, a firewall crash. Public sources confirm exploitation activity in the wild (CISA KEV catalo...

CVE-2024-53704

CVE-2024-53704 affects SonicWall SonicOS SSLVPN. An improper authentication vulnerability in the SSLVPN authentication mechanism allows remote attackers to bypass authentication and hijack active VPN sessions. Affected versions include SonicOS SSLVPN 7.1.1-7040 before 7.1.3-7015 and 7.1.2-7019. P...

CVE-2019-12255

The Wind River VxWorks TCP component contains a Buffer Overflow (issue 1 of 4) within the IPnet network stack. The root cause is an integer underflow triggered when the TCP Urgent Pointer is set to 0. This vulnerability affects multiple versions of VxWorks, including versions back to 6.5, as well...

CVE-2022-22274

CVE-2022-22274 is a stack-based buffer overflow in SonicWall’s SonicOS web interface triggered by an HTTP request. The vulnerability allows a remote, unauthenticated attacker to cause Denial of Service and potentially execute code on affected devices. Public sources consistently tie this to the S...

CVE-2019-12258

CVE-2019-12258 affects Wind River VxWorks 6.6–vx7 via the IPNet TCP stack, causing a session-fixation vulnerability that can lead to a TCP DoS from malformed TCP options. Public sources describe this as part of the URGENT/11 set and note the related IPNet flaws across IPv4/TCP handling. Mitigatio...

CVE-2019-12261

CVE-2019-12261 is a Wind River VxWorks IPNet TCP vulnerability (6.7–6.9 and vx7) with a Buffer Overflow in the TCP component caused by TCP Urgent Pointer state confusion during connect() to a remote host. The connected documents identify the affected platform, the issue type, and the root cause, ...

CVE-2019-12260

CVE-2019-12260 affects Wind River VxWorks 6.9 and vx7, in the IPNet TCP stack. The issue is a buffer overflow in the TCP component caused by a malformed TCP AO option leading to a TCP Urgent Pointer state confusion. Public sources describe potential for remote code execution or crashes via crafte...

CVE-2019-12263

Wind River VxWorks versions 6.9.4 and vx7 are affected by a buffer overflow in the TCP component (issue 4 of 4) within the IPNET security stack. The vulnerability is caused by a race condition leading to TCP Urgent Pointer state confusion . Impacted systems include Siemens SIPROTEC 4 7SJ66 (prior...

CVE-2019-12259

CVE-2019-12259 affects Wind River VxWorks 6.6–6.9 and vx7, due to an array index error in the IGMPv3 client component causing a DoS via a NULL pointer dereference during IGMP parsing. Connected sources confirm the affected platform range and root cause (IPNET IGMP parsing error). The CISA/ICS adv...

CVE-2019-7479

CVE-2019-7479 affects SonicOS and SonicOSv: authenticated read-only administrators can elevate privileges to configuration mode. Affected versions include SonicOS Gen 5 up to 5.9.1.12-4o and earlier; Gen 6 up to versions such as 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1....

CVE-2019-12265

CVE-2019-12265 affects Wind River VxWorks IGMPv3 client by a memory leak in the IGMPv3 membership report handling, leading to a potential information leak. The vulnerability is in the IPNET stack and is part of the URGENT/11 set of issues affecting VxWorks 6.5–6.9.4 (and related VXWorks variants)...

CVE-2019-12256

CVE-2019-12256 affects Wind River VxWorks 6.9 and vx7 IPNET stack, with a Buffer Overflow in the IPv4 options parsing (IP options) that can crash a tNet0 task and lead to remote code execution. The vulnerability is classified with a high potential impact (CVSS v3 base 9.8: network access, no auth...

CVE-2019-12257

CVE-2019-12257 affects Wind River VxWorks 6.6–6.9 via a heap-based buffer overflow in the IPnet DHCP client (ipdhcpc) during DHCP Offer/ACK parsing. Several connected advisories (Tenable OT plugins, ICS/CISA entries, and vendor briefs) confirm the vulnerability in the IPnet DHCP path and indicate...

CVE-2023-1101

SonicWall SonicOS SSLVPN is affected by CVE-2023-1101 due to an improper restriction of excessive MFA attempts. The vulnerability allows an authenticated attacker to submit many MFA codes, leading to potential abuse of MFA workflow. Connected sources (e.g., SonicWall PSIRT SNWLID-2023-0005) confi...

CVE-2024-22394

CVE-2024-22394 affects SonicWall SonicOS SSL-VPN on firmware version 7.1.1-7040. The issue is an improper authentication vulnerability that could allow a remote attacker to bypass authentication under specific conditions. Affected component: SonicOS SSL-VPN feature. Root cause: deficiencies in au...

CVE-2021-20031

CVE-2021-20031 is a host header redirection vulnerability in SonicWall SonicOS (notably SonicOS 7.0). The issue stems from trusting Host headers, enabling an attacker to cause firewall-management users to be redirected to arbitrary web domains. Connected documents confirm open-redirect behavior a...

CVE-2021-20019

CVE-2021-20019 describes a memory disclosure in SonicOS HTTP server: an unauthenticated, crafted HTTP request may cause the server to leak partial memory, potentially exposing sensitive data. Reported by multiple sources to affect SonicOS generations (SonicOS/SonicWall devices); some entries list...

CVE-2026-0399

SonicWALL SonicOS is affected by multiple post-authentication stack-based buffer overflow vulnerabilities. The root cause is improper bounds checking within an API endpoint of the SonicOS management interface. An attacker could exploit these flaws to execute arbitrary code on the system or trigge...

CVE-2026-0204

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. This flaw affects SonicWall firewall devices, though the specific affected versions are not provided in the documentation. No exploits have been ...

CVE-2024-40764

CVE-2024-40764 affects SonicOS IPSec VPN (SonicWall/SonicOS). The issue is a heap-based buffer overflow caused by a boundary error when processing untrusted input in the IPSec VPN implementation, allowing an unauthenticated remote attacker to trigger a Denial of Service. Multiple sources corrobor...

CVE-2019-7487

CVE-2019-7487 affects SonicOS SSLVPN NACagent 3.5 for Windows. The issue stems from an unquoted autorun/service path, allowing a malicious binary within the parent directory to trigger code execution. Multiple sources reiterate that installation creates an unquoted path which can be exploited loc...

CVE-2023-0656

CVE-2023-0656 is a stack-based buffer overflow in the SonicOS web management interface of SonicWall firewalls. The vulnerability can be exploited remotely by an unauthenticated attacker via crafted HTTP requests to overflow a stack buffer, potentially causing a Denial of Service (DoS) and a crash...

CVE-2023-41713

CVE-2023-41713 – SonicOS vulnerability: Use of a hard-coded password in the internal dynHandleBuyToolbar demo function. Documented in multiple sources (NVD, SonicWall PSIRT SNWLID-2023-0012). Affected product: SonicOS firmware used on SonicWall devices. Impact is described as high confidentiality...

CVE-2022-22275

CVE-2022-22275 pertains to SonicOS (SonicWall firewall) and describes an improper restriction of the TCP communication channel for HTTP/S inbound traffic from WAN to DMZ, potentially enabling a DoS attack until the TCP handshake completes. Connected sources (SonicWall PSIRT SNWLID-2022-0004) conf...

CVE-2024-29012

This CVE affects SonicOS HTTP server components in SonicWall SonicOS. The vulnerability is a stack-based buffer overflow in the HTTP server triggered through the sscanf function, allowing an authenticated remote attacker to cause Denial of Service (DoS). The SonicWall PSIRT notes there is no know...

CVE-2024-29013

Affected product: SonicOS SSL-VPN (SonicWall SonicOS). Issue: heap-based buffer overflow in the memcpy function, enabling an authenticated remote attacker to cause Denial of Service. Documents indicate the vulnerability exists in SonicOS SSL-VPN; exploitation status is not publicly demonstrated i...

CVE-2020-5142

CVE-2020-5142 is a stored XSS vulnerability in the SonicOS SSLVPN web interface. It affects SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, and Gen 7 (SonicOS 7.0.0.0). An unauthenticated remote attacker can inject and potentially execute arbitrary JavaScr...

CVE-2023-39276

SonicWall SonicOS is affected by a post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint. This flaw can lead to a firewall crash . This vulnerability impacts the SonicOS Management Web Interface and SSLVPN Portal, but it does not affect SonicWall S...

CVE-2021-20027

This CVE affects SonicOS Gen5/Gen6/Gen7 and SonicOSv with a buffer overflow in the HTTP header handling that permits a remote attacker to cause a DoS. The root cause is improper neutralization of HTTP headers, leading to a crash when processing specially crafted requests. Public details in connec...

CVE-2020-5132

CVE-2020-5132 affects SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature. The issue is a misconfiguration that enables a DNS domain-name collision vulnerability: when internal domain names are exposed on the SSL-VPN authentication page, an attacker aware of internal domain names co...

CVE-2020-5143

SonicOS SSLVPN login page vulnerability CVE-2020-5143 allows remote unauthenticated username enumeration based on server responses. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (SonicOS 7.0.0.0). Root cause: username enumeration through ...

CVE-2023-39279

The SonicOS operating system is susceptible to a post-authentication Stack-Based Buffer Overflow vulnerability (CWE-121) within the getPacketReplayData.json URL endpoint. Exploitation of this flaw can result in a firewall crash , impacting availability. This vulnerability affects the SonicOS Mana...

CVE-2023-41711

CVE-2023-41711 is a post-authentication stack-based buffer overflow in SonicOS affecting the endpoints sonicwall.exp and prefs.exp , causing a firewall crash. A Nessus plugin and vendor PSIRTs enumerate this among multiple SonicWall SonicOS vulnerabilities (SNWLID-2023-0012). Impacts are describe...

CVE-2023-39277

SonicWall SonicOS is impacted by a post-authentication stack-based buffer overflow vulnerability (CWE-121) affecting the sonicflow.csv and appflowsessions.csv URL endpoints. Exploitation of this vulnerability leads to a firewall crash . This issue affects the SonicOS Management Web Interface and ...

CVE-2023-41712

CVE-2023-41712 is a post-authentication stack-based buffer overflow vulnerability in SonicWall SonicOS SSL VPN handling of the plainprefs.exp URL, which can cause a firewall crash. Affected product: SonicWall/SonicOS management web interface and SSL VPN portal (not SMA100/SMA1000 per Nessus notes...

CVE-2018-5281

SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices is affected by a cross-site scripting (XSS) vulnerability via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. The available connected data confirms the affected product and the vulnerability class, but does ...

CVE-2026-0205

The SonicOS operating system, used in SonicWall firewall devices, is affected by a post-authentication Path Traversal vulnerability. This flaw allows an authenticated attacker to bypass directory restrictions and interact with services that are typically restricted. While the specific affected ve...

CVE-2026-0206

A post-authentication stack-based buffer overflow vulnerability exists in SonicOS , the operating system used by SonicWall firewall devices. This flaw allows a remote attacker to cause the firewall to crash . While the specific vulnerable versions are not explicitly listed in the provided documen...

CVE-2023-41715

CVE-2023-41715 is the SonicWall SonicOS post-authentication Improper Privilege Management vulnerability affecting the SSL VPN tunnel. The related Nessus/SNWLID-2023-0012 entry confirms a family of post-authentication issues in SonicOS management/web interfaces and SSLVPN portal, with CVE-2023-417...

CVE-2025-40601

The SonicWall SonicOS firewall is affected by a stack-based buffer overflow vulnerability in the SSLVPN service . This flaw allows a remote, unauthenticated attacker to trigger a service failure, resulting in a Denial of Service (DoS) that could cause the firewall to crash. While specific exploit...

CVE-2026-0400

A post-authentication Format String vulnerability exists in the SonicOS operating system used by SonicWall firewall devices. The root cause is the insufficient handling of format lines , which allows a remote attacker to trigger a service failure and crash the firewall . While the specific affect...

CVE-2021-20046

SonicOS vulnerability CVE-2021-20046 is a stack-based buffer overflow in the HTTP Content-Length response header that can allow a remote authenticated attacker to cause DoS and potentially execute code. It affects SonicOS Gen 5, Gen 6 and Gen 7 firmware. The root cause is a boundary/overflow cond...

CVE-2021-20048

The CVE-2021-20048 issue is a stack-based buffer overflow in the SonicOS SessionID HTTP response header that affects SonicOS Gen 5, Gen 6 and Gen 7 firmware. A remote authenticated attacker could cause Denial of Service and, potentially, code execution. Concrete details: affected product family (...

CVE-2023-39278

The SonicOS operating system is vulnerable to a Stack-Based Buffer Overflow (CWE-787/CWE-121) within the main.cgi component. The flaw is triggered by a post-authentication user assertion failure , which can result in a firewall crash . This vulnerability impacts the SonicOS Management Web Interfa...

CVE-2023-39280

The SonicOS firmware is affected by a post-authentication Stack-Based Buffer Overflow vulnerability (CWE-121) located in the ssoStats-s.xml and ssoStats-s.wri URL endpoints. Successful exploitation of this vulnerability can lead to a firewall crash , impacting system availability. This issue affe...

CVE-2018-5280

CVE-2018-5280 concerns SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices, with a cross-site scripting (XSS) vulnerability exploitable via the Configure SSO screens. Affected product: SonicWall SonicOS NSA 2016 Q4. Root cause and impact details are limited in the provided docum...