Skip to content

Sonicwall Sonicos vulnerabilities

sonicwall sonicosImproper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ...CVE-2022-222757.5 HighApril 27, 2022
sonicwall sonicos, sonicosv +1 moreA Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote...CVE-2022-22274Public exploitEPSS 75.5%9.8 CriticalMarch 25, 2022
sonicwall sonicosA Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote...CVE-2021-200488.8 HighJanuary 7, 2022
sonicwall sonicosA Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote...CVE-2021-200468.8 HighJanuary 7, 2022
sonicwall sonicosA Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to...CVE-2021-20031Public exploitEPSS 13.0%6.1 MediumOctober 12, 2021
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a...CVE-2021-200197.5 HighJune 23, 2021
sonicwall sonicosA buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service ...CVE-2021-200277.5 HighJune 14, 2021
openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 HighMarch 25, 2021
openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 MediumMarch 25, 2021
sonicwall sonicos, sonicosv +1 moreSonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management...CVE-2020-51435.3 MediumOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A...CVE-2020-5142Public exploit6.1 MediumOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist...CVE-2020-51416.5 MediumOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service ...CVE-2020-51407.5 HighOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause...CVE-2020-51397.5 HighOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause...CVE-2020-51387.5 HighOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause...CVE-2020-51377.5 HighOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of...CVE-2020-51366.5 MediumOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service ...CVE-2020-5135In KEVEPSS 26.9%9.8 CriticalOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file...CVE-2020-51346.5 MediumOctober 12, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service...CVE-2020-51337.5 HighOctober 12, 2020
sonicwall sma100, sma1000, sma100 firmware +1 more +3 moreSonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to...CVE-2020-51325.3 MediumSeptember 30, 2020
sonicwall sonicosSonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction ...CVE-2020-51305.3 MediumJuly 17, 2020
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to...CVE-2019-74797.2 HighDecember 31, 2019
sonicwall sonicos, sonicos sslvpn nacagent +1 moreInstallation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value...CVE-2019-74877.8 HighDecember 19, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 moreWind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of...CVE-2019-122619.8 CriticalAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is...CVE-2019-12260EPSS 23.2%9.8 CriticalAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5 through 6.9 and vx7 has Session Fixation in the TCP component. This is a...CVE-2019-12258EPSS 22.9%7.5 HighAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5 through 6.9.3 has a Buffer Overflow in the TCP component (issue 1 of 4)....CVE-2019-12255Public exploitEPSS 75.2%9.8 CriticalAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client...CVE-2019-12265EPSS 59.8%5.3 MediumAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There...CVE-2019-122638.1 HighAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +8 more +10 moreWind River VxWorks 6.9 and vx7 has an array index error in the IGMPv3 client component. There is...CVE-2019-12259EPSS 15.9%7.5 HighAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET...CVE-2019-12256EPSS 26.8%9.8 CriticalAugust 9, 2019
windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +7 more +9 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the DHCP client component. There is an...CVE-2019-12257EPSS 84.3%8.8 HighAugust 9, 2019
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain...CVE-2019-74777.5 HighApril 2, 2019
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific...CVE-2019-74759.8 CriticalApril 2, 2019
sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave...CVE-2019-74746.5 MediumApril 2, 2019
sonicwall sonicos, sonicosv +1 moreIn SonicWall SonicOS, administrators without full permissions can download imported certificates....CVE-2018-98675.5 MediumFebruary 19, 2019
debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 MediumMay 21, 2018
sonicwall sonicosSonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom...CVE-2018-52815.4 MediumJanuary 8, 2018
sonicwall sonicosSonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure...CVE-2018-52805.4 MediumJanuary 8, 2018
sonicwall sonicosMultiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall...CVE-2015-34474.3 MediumApril 29, 2015
sonicwall sonicos enhancedCross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in...CVE-2008-4918Public exploit4.3 MediumNovember 4, 2008