SO
Product
SonicOS
On CISA KEVExploited in the wildRansomware-linked
77
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 30Medium 31Low 0
Watch
Add SonicOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-53704 RansomwareIn wildKEV | 9.8 | Jan 9 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Affected: 7.1.1-7058 and older versions; 7.1.2-7019; 8.0.0-8035 |
| CVE-2024-40766 RansomwareIn wildKEV | 9.8 | Aug 23 | SonicWall SonicOS Improper Access Control Vulnerability Affected: 5.9.2.14-12o and older versions; 6.5.4.14-109n and older versions; 7.0.1-5035 and older versions |
| CVE-2020-5135 RansomwareIn wildKEV | 9.8 | Oct 12 | SonicWall SonicOS Buffer Overflow Vulnerability Affected: SonicOS 6.5.4.7-79n and earlier; SonicOS 6.5.1.11-4n and earlier; SonicOS 6.0.5.3-93o and earlier; SonicOSv 6.5.4.4-44v-21-794 and earlier; SonicOS 7.0.0.0-1 |
| CVE-2025-40600 | 9.8 | Jul 29 | Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption Affected: 7.2.0-7015 and older versions |
| CVE-2024-40765 | 9.8 | Jan 9 | An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute… Affected: 6.5.4.4-44v-21-2395 and older versions; 7.0.1-5151 and older versions; 7.1.1-7051 and older versions |
| CVE-2024-40762 | 9.8 | Jan 9 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker… Affected: 7.1.1-7058 and older versions; 7.1.2-7019; 8.0.0-8035 |
| CVE-2024-22394 | 9.8 | Feb 8 | An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass… Affected: 7.1.1-7040 |
| CVE-2022-22274 | 9.8 | Mar 25 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in… Affected: through 7.0.1-5050; through 7.0.1-r579 |
| CVE-2019-12261 | 9.8 | Aug 9 | Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4) Affected: 5.9.0.0 through 5.9.0.7; 5.9.1.0. through 5.9.1.12; 6.2.0.0 through 6.2.3.1; 6.2.4.0 through 6.2.4.3; 6.2.5.0 through 6.2.5.3; 6.2.6.0 through 6.2.6.1; +10 more |
| CVE-2019-12260 | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4) Affected: 5.9.0.0 through 5.9.0.7; 5.9.1.0. through 5.9.1.12; 6.2.0.0 through 6.2.3.1; 6.2.4.0 through 6.2.4.3; 6.2.5.0 through 6.2.5.3; 6.2.6.0 through 6.2.6.1; +10 more |
| CVE-2019-12255 | 9.8 | Aug 9 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4) Affected: 5.9.0.0 through 5.9.0.7; 5.9.1.0. through 5.9.1.12; 6.2.0.0 through 6.2.3.1; 6.2.4.0 through 6.2.4.3; 6.2.5.0 through 6.2.5.3; 6.2.6.0 through 6.2.6.1; +10 more |
| CVE-2019-12256 | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component Affected: 5.9.0.0 through 5.9.0.7; 5.9.1.0. through 5.9.1.12; 6.2.0.0 through 6.2.3.1; 6.2.4.0 through 6.2.4.3; 6.2.5.0 through 6.2.5.3; 6.2.6.0 through 6.2.6.1; +10 more |
| CVE-2019-7475 | 9.8 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services Affected: through 5.9.1.10; 6.0.5.3-86o; 6.2.7.3; 6.2.7.8; 6.4.0.0; 6.5.1.3; +3 more |
| CVE-2024-12802 | 9.1 | Jan 9 | SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when… Affected: 6.5.4.4-44v-21-2457 and older versions; 6.5.4.15-117n and older versions; 7.0.1-5161 and older versions; 7.1.1-7058 and older versions; 7.1.2-7019; 8.0.0-8035 |
| CVE-2024-3596 | 9.0 | Jul 9 | RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Affected: All versions, or not specified |
Showing 15