CVSS: 9.0EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41715
https://notcve.org/view.php?id=CVE-2023-41715
17 Oct 2023 — SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel. La vulnerabilidad de administración de privilegios inadecuada posterior a la autenticación de SonicOS en el túnel VPN SSL de SonicOS permite a los usuarios elevar sus privilegios dentro del túnel. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-269: Improper Privilege Management •
CVSS: 7.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41713
https://notcve.org/view.php?id=CVE-2023-41713
17 Oct 2023 — SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. SonicOS utiliza la vulnerabilidad de contraseña codificada en la función de demostración 'dynHandleBuyToolbar'. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-259: Use of Hard-coded Password CWE-798: Use of Hard-coded Credentials •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41712
https://notcve.org/view.php?id=CVE-2023-41712
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en el extremo URL de SSL VPN plainprefs.exp provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-41711
https://notcve.org/view.php?id=CVE-2023-41711
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoint de URL sonicwall.exp, prefs.exp provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39280
https://notcve.org/view.php?id=CVE-2023-39280
17 Oct 2023 — SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoints de URL ssoStats-s.xml y ssoStats-s.wri provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39279
https://notcve.org/view.php?id=CVE-2023-39279
17 Oct 2023 — SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer basado posterior a la autenticación de SonicOS en el endpoint de URL getPacketReplayData.json provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39278
https://notcve.org/view.php?id=CVE-2023-39278
17 Oct 2023 — SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash. La falla de aserción del usuario posterior a la autenticación de SonicOS conduce a una vulnerabilidad de desbordamiento del búfer a través de main.cgi que provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39277
https://notcve.org/view.php?id=CVE-2023-39277
17 Oct 2023 — SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en los endpoints de URL sonicflow.csv y appflowsessions.csv provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 75EXPL: 0CVE-2023-39276
https://notcve.org/view.php?id=CVE-2023-39276
17 Oct 2023 — SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en el endpoint de la URL getBookmarkList.json provoca una falla del firewall. • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 12%CPEs: 59EXPL: 2CVE-2022-47522
https://notcve.org/view.php?id=CVE-2022-47522
15 Apr 2023 — The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a clien... • https://github.com/toffeenutt/CVE-2022-47522-exploit • CWE-290: Authentication Bypass by Spoofing •