CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41712
https://notcve.org/view.php?id=CVE-2023-41712
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en el extremo URL de SSL VPN plainprefs.exp provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41711
https://notcve.org/view.php?id=CVE-2023-41711
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoint de URL sonicwall.exp, prefs.exp provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39280
https://notcve.org/view.php?id=CVE-2023-39280
17 Oct 2023 — SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoints de URL ssoStats-s.xml y ssoStats-s.wri provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39279
https://notcve.org/view.php?id=CVE-2023-39279
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer basado posterior a la autenticación de SonicOS en el endpoint de URL getPacketReplayData.json provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39278
https://notcve.org/view.php?id=CVE-2023-39278
17 Oct 2023 — SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash. La falla de aserción del usuario posterior a la autenticación de SonicOS conduce a una vulnerabilidad de desbordamiento del búfer a través de main.cgi que provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39277
https://notcve.org/view.php?id=CVE-2023-39277
17 Oct 2023 — SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en los endpoints de URL sonicflow.csv y appflowsessions.csv provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39276
https://notcve.org/view.php?id=CVE-2023-39276
17 Oct 2023 — SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en el endpoint de la URL getBookmarkList.json provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-44218
https://notcve.org/view.php?id=CVE-2023-44218
03 Oct 2023 — A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability. Una falla dentro de la función SonicWall NetExtender Pre-Logon permite que un usuario no autorizado obtenga acceso al sistema operativo Windows host con privilegios de nivel 'SYSTEM', lo que genera una vulnerabilidad de escalada de privilegios local (LPE). • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014 • CWE-267: Privilege Defined With Unsafe Actions •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-44217
https://notcve.org/view.php?id=CVE-2023-44217
03 Oct 2023 — A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality. Una vulnerabilidad de escalada de privilegios local en el cliente MSI SonicWall Net Extender para Windows 10.2.336 y versiones anteriores permite a un usuario local con pocos privilegios obtener privilegios de System mediante la ejecución de la funcionalidad de reparación. • https://github.com/advisories/GHSA-jw5c-8746-98g5 • CWE-269: Improper Privilege Management •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2023-34137
https://notcve.org/view.php?id=CVE-2023-34137
13 Jul 2023 — SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 • CWE-287: Improper Authentication CWE-305: Authentication Bypass by Primary Weakness •