Lucene search
HistoryOct 17, 2023 - 11:15 p.m.
CVE-2023-41715
cve-2023-41715
sonicos
ssl vpn
privilege escalation
vulnerability
improper privilege management
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
19.3%
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.
Affected configurations
Node
sonicwallsonicosRange<7.0.1-5145
sonicwallnsa2700Match-
ORsonicwallnsa3700Match-
ORsonicwallnsa4700Match-
ORsonicwallnsa5700Match-
ORsonicwallnsa6700Match-
ORsonicwallnssp10700Match-
ORsonicwallnssp11700Match-
ORsonicwallnssp13700Match-
ORsonicwallnssp15700Match-
ORsonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
ORsonicwalltz270Match-
ORsonicwalltz270wMatch-
ORsonicwalltz370Match-
ORsonicwalltz370wMatch-
ORsonicwalltz470Match-
ORsonicwalltz470wMatch-
ORsonicwalltz570Match-
ORsonicwalltz570pMatch-
ORsonicwalltz570wMatch-
ORsonicwalltz670Match-
Node
sonicwallsonicosRange<6.5.4.4-44v-21-2340
sonicwallnsv10Match-
ORsonicwallnsv100Match-
ORsonicwallnsv1600Match-
ORsonicwallnsv200Match-
ORsonicwallnsv25Match-
ORsonicwallnsv270Match-
ORsonicwallnsv300Match-
ORsonicwallnsv400Match-
ORsonicwallnsv470Match-
ORsonicwallnsv50Match-
ORsonicwallnsv800Match-
ORsonicwallnsv870Match-
Node
sonicwallsonicosRange<6.5.4.13-105n
sonicwallnsa_2600Match-
ORsonicwallnsa_2650Match-
ORsonicwallnsa_3600Match-
ORsonicwallnsa_3650Match-
ORsonicwallnsa_4600Match-
ORsonicwallnsa_4650Match-
ORsonicwallnsa_5600Match-
ORsonicwallnsa_5650Match-
ORsonicwallnsa_6600Match-
ORsonicwallnsa_6650Match-
ORsonicwallsm_9200Match-
ORsonicwallsm_9250Match-
ORsonicwallsm_9400Match-
ORsonicwallsm_9450Match-
ORsonicwallsm_9600Match-
ORsonicwallsm_9650Match-
ORsonicwallsoho_250Match-
ORsonicwallsoho_250wMatch-
ORsonicwallsohowMatch-
ORsonicwalltz_300Match-
ORsonicwalltz_300pMatch-
ORsonicwalltz_300wMatch-
ORsonicwalltz_350Match-
ORsonicwalltz_400Match-
ORsonicwalltz_400wMatch-
ORsonicwalltz_500Match-
ORsonicwalltz_500wMatch-
ORsonicwalltz_600Match-
ORsonicwalltz_600pMatch-
Related
cve
cve
CVE-2023-41715
2023-10-17 23:15:12
cvelist
cvelist
CVE-2023-41715
2023-10-17 22:33:57
prion
prion
Privilege escalation
2023-10-17 23:15:00
nessus
nessus
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)
2024-02-05 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2023-41715