CVE-2024-45318: sonicwall sma_200_firmware Stack-based Buffer Overflow

Vulnerability summary

CVE-2024-45318 is a high (CVSS 8.1) Stack-based Buffer Overflow vulnerability in sonicwall sma_200_firmware. EPSS estimates a 1.04% chance of exploitation in the next 30 days, higher than 63.2% of scored vulnerabilities.

Timeline

1. 05-12-2024
   PublishedVulnerability first disclosed.
2. 09-12-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).