Lucene search
HistoryOct 17, 2023 - 11:15 p.m.
CVE-2023-41715
sonicos
post-authentication
privilege management
vulnerability
ssl vpn tunnel
cve-2023-41715
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.3%
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.
Affected configurations
Node
sonicwallsonicosRange<7.0.1-5145
sonicwallnsa2700Match-
ORsonicwallnsa3700Match-
ORsonicwallnsa4700Match-
ORsonicwallnsa5700Match-
ORsonicwallnsa6700Match-
ORsonicwallnssp10700Match-
ORsonicwallnssp11700Match-
ORsonicwallnssp13700Match-
ORsonicwallnssp15700Match-
ORsonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
Node
sonicwallsonicosRange<6.5.4.4-44v-21-2340
sonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
Node
sonicwallsonicosRange<6.5.4.13-105n
sonicwallnsa_2600Match-
ORsonicwallnsa_2650Match-
ORsonicwallnsa_3600Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_4600Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_5600Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6600Match-
ORsonicwallnsa_6650Match-
ORsonicwallsm_9200Match-
ORsonicwallsm_9250Match-
ORsonicwallsm_9400Match-
ORsonicwallsm_9450Match-
ORsonicwallsm_9600Match-
ORsonicwallsm_9650Match-
ORsonicwallsoho_250Match-
ORsonicwallsoho_250wMatch-
ORsonicwallsohowMatch-
ORsonicwalltz_300Match-
ORsonicwalltz_300pMatch-
ORsonicwalltz_300wMatch-
ORsonicwalltz_350Match-
ORsonicwalltz_400Match-
ORsonicwalltz_400wMatch-
ORsonicwalltz_500Match-
ORsonicwalltz_500wMatch-
ORsonicwalltz_600Match-
ORsonicwalltz_600pMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonicwall:sonicos | sonicwall sonicos | lt | 7.0.1-5145 |
CNA Affected
[
{
"defaultStatus": "unknown",
"modules": [
"Management",
"SSLVPN"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.0.1-5119 and earlier versions"
},
{
"status": "affected",
"version": "7.0.1-5129 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.4-44v-21-2079 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.12-101n and earlier versions"
}
]
}
]Related
cvelist
cvelist
CVE-2023-41715
2023-10-17 22:33:57
prion
prion
Privilege escalation
2023-10-17 23:15:00
nvd
nvd
CVE-2023-41715
2023-10-17 23:15:12
nessus
nessus
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)
2024-02-05 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.3%
Related for CVE-2023-41715