Sonicwall Sonicos vulnerabilities, page 3

82 vulnerabilities

Known vulnerabilities in Sonicwall Sonicos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2024-22394sonicwall · sonicossonicwall sonicosAn improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.  This issue affects only firmware version SonicOS 7.1.1-7040.EPSS0.75%5.3MediumCVE-2024-22396sonicwall · sonicossonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.EPSS1.12%8.3HighCVE-2024-22397sonicwall · sonicossonicwall sonicosImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code.EPSS1.06%4.9MediumCVE-2024-12806sonicwall · sonicossonicwall sonicosA post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.EPSS0.65%9.1CriticalCVE-2024-12802sonicwall · sonicossonicwall sonicosSSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.EPSS0.49%7.2HighCVE-2024-12803sonicwall · sonicossonicwall sonicosA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.EPSS0.83%7.2HighCVE-2024-12805sonicwall · sonicossonicwall sonicosA post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.EPSS0.73%9CriticalCVE-2024-3596Alpine Linuxalpine · freeradius +75 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.EPSS14.86%7.2HighCVE-2019-7479sonicwall · sonicos +1 moresonicwall sonicosA vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).EPSS0.92%9.8CriticalCVE-2019-7475sonicwall · sonicos +1 moresonicwall sonicosA vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).EPSS1.39%7.8HighCVE-2019-7487sonicwall · sonicos +1 moresonicwall sonicosInstallation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.EPSS0.46%7.5HighCVE-2019-7477sonicwall · sonicos +1 moresonicwall sonicosA vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).EPSS1.19%6.5MediumCVE-2019-7474sonicwall · sonicos +1 moresonicwall sonicosA vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).EPSS0.67%9.8CriticalCVE-2019-12256belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.EPSS26.63%9.8CriticalCVE-2019-12255belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.EPSS75.08%7.5HighCVE-2019-12259belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.EPSS15.88%9.8CriticalCVE-2019-12261belden · garrettcom_magnum_dx940e_firmware +11 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.EPSS8.97%9.8CriticalCVE-2019-12260belden · garrettcom_magnum_dx940e_firmware +11 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.EPSS23.25%5.3MediumCVE-2019-12265belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.EPSS59.80%7.5HighCVE-2019-12258belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.EPSS22.77%