Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 41

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0079 Published 2023-10-17 No fix listed CWE-269
Priority LOW 31

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121
Priority LOW 31

SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00969 Published 2023-10-17 No fix listed CWE-121