Lucene search
HistoryOct 17, 2023 - 11:15 p.m.
CVE-2023-39277
cve-2023-39277
sonicos
post-authentication
stack-based buffer overflow
url endpoints
firewall crash
nvd
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.
Affected configurations
Node
sonicwallsonicosRange<7.0.1-5145
sonicwallnsa2700Match-
ORsonicwallnsa3700Match-
ORsonicwallnsa4700Match-
ORsonicwallnsa5700Match-
ORsonicwallnsa6700Match-
ORsonicwallnssp10700Match-
ORsonicwallnssp11700Match-
ORsonicwallnssp13700Match-
ORsonicwallnssp15700Match-
ORsonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
Node
sonicwallsonicosRange<6.5.4.4-44v-21-2340
sonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
Node
sonicwallsonicosRange<6.5.4.13-105n
sonicwallnsa_2600Match-
ORsonicwallnsa_2650Match-
ORsonicwallnsa_3600Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_4600Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_5600Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6600Match-
ORsonicwallnsa_6650Match-
ORsonicwallsm_9200Match-
ORsonicwallsm_9250Match-
ORsonicwallsm_9400Match-
ORsonicwallsm_9450Match-
ORsonicwallsm_9600Match-
ORsonicwallsm_9650Match-
ORsonicwallsoho_250Match-
ORsonicwallsoho_250wMatch-
ORsonicwallsohowMatch-
ORsonicwalltz_300Match-
ORsonicwalltz_300pMatch-
ORsonicwalltz_300wMatch-
ORsonicwalltz_350Match-
ORsonicwalltz_400Match-
ORsonicwalltz_400wMatch-
ORsonicwalltz_500Match-
ORsonicwalltz_500wMatch-
ORsonicwalltz_600Match-
ORsonicwalltz_600pMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonicwall:sonicos | sonicwall sonicos | lt | 7.0.1-5145 |
CNA Affected
[
{
"defaultStatus": "unknown",
"modules": [
"Management",
"SSLVPN"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.0.1-5119 and earlier versions"
},
{
"status": "affected",
"version": "7.0.1-5129 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.4-44v-21-2079 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.12-101n and earlier versions"
}
]
}
]Related
nvd
nvd
CVE-2023-39277
2023-10-17 23:15:11
cvelist
cvelist
CVE-2023-39277
2023-10-17 22:08:55
prion
prion
Stack overflow
2023-10-17 23:15:00
nessus
nessus
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)
2024-02-05 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
Related for CVE-2023-39277