Sonicwall Sonicos vulnerabilities, page 4
82 vulnerabilities
Known vulnerabilities in Sonicwall Sonicos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2019-12263belden · garrettcom_magnum_dx940e_firmware +10 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.EPSS3.16%HighCVE-2019-12257belden · garrettcom_magnum_dx940e_firmware +9 morebelden garrettcom_magnum_dx940e_firmwareWind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.EPSS84.18%MediumCVE-2026-0401sonicwall · sonicossonicwall sonicosA post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.EPSS0.40%MediumCVE-2026-0402sonicwall · sonicossonicwall sonicosA post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.EPSS0.40%MediumCVE-2026-0206sonicwall · sonicossonicwall sonicosA post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.EPSS0.50%MediumCVE-2026-0399sonicwall · sonicossonicwall sonicosMultiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.EPSS0.38%MediumCVE-2026-0205sonicwall · sonicossonicwall sonicosA post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.EPSS0.39%MediumCVE-2026-0400sonicwall · sonicossonicwall sonicosA post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.EPSS0.50%HighCVE-2026-0204sonicwall · sonicossonicwall sonicosA vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.EPSS0.38%MediumCVE-2026-0516sonicwall · sonicossonicwall sonicosA improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.EPSS0.34%MediumCVE-2026-3439sonicwall · sonicossonicwall sonicosA post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.EPSS0.41%HighCVE-2023-1101sonicwall · sonicossonicwall sonicosSonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.EPSS0.68%MediumCVE-2023-41712sonicwall · sonicossonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash.EPSS0.97%HighCVE-2023-41713sonicwall · sonicossonicwall sonicosSonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.EPSS0.71%MediumCVE-2023-41711sonicwall · sonicossonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash.EPSS0.97%HighCVE-2023-41715sonicwall · sonicossonicwall sonicosSonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.EPSS0.79%HighCVE-2023-0656sonicwall · sonicossonicwall sonicosA Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.EPSS41.32%MediumCVE-2023-39277sonicwall · sonicossonicwall sonicosSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.EPSS0.97%MediumCVE-2023-39280sonicwall · sonicossonicwall sonicosSonicOS p
ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.EPSS0.97%MediumCVE-2023-39278sonicwall · sonicossonicwall sonicosSonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash.EPSS0.97%