SO
Product
SonicOSv
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 7Low 0
Watch
Add SonicOSv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5135 RansomwareIn wildKEV | 9.8 | Oct 12 | SonicWall SonicOS Buffer Overflow Vulnerability Affected: through 6.5.4.4 |
| CVE-2022-22274 | 9.8 | Mar 25 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in… Affected: through 6.5.4.4-44v-21-1452 |
| CVE-2019-7475 | 9.8 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services Affected: 6.5.0.2-8v_rc363; 6.5.0.2.8v_rc366; 6.5.0.2.8v_rc367; 6.5.0.2.8v_rc368 |
| CVE-2021-20019 | 7.5 | Jun 23 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data… Affected: 6.5.4.4-44v-21-955 |
| CVE-2020-5140 | 7.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads… Affected: through 6.5.4.4 |
| CVE-2020-5139 | 7.5 | Oct 12 | A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall… Affected: through 6.5.4.4 |
| CVE-2020-5138 | 7.5 | Oct 12 | A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash Affected: through 6.5.4.4 |
| CVE-2020-5137 | 7.5 | Oct 12 | A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash Affected: through 6.5.4.4 |
| CVE-2020-5133 | 7.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash Affected: through 6.5.4.4 |
| CVE-2019-7477 | 7.5 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled Affected: 6.5.0.2-8v_rc363; 6.5.0.2.8v_rc366; 6.5.0.2.8v_rc367; 6.5.0.2.8v_rc368 |
| CVE-2019-7479 | 7.2 | Dec 31 | A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode Affected: 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v |
| CVE-2020-5141 | 6.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service Affected: through 6.5.4.4 |
| CVE-2020-5136 | 6.5 | Oct 12 | A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall… Affected: through 6.5.4.4 |
| CVE-2020-5134 | 6.5 | Oct 12 | A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash Affected: through 6.5.4.4 |
| CVE-2019-7474 | 6.5 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific… Affected: 6.5.0.2-8v_rc363; 6.5.0.2.8v_rc366; 6.5.0.2.8v_rc367; 6.5.0.2.8v_rc368 |
| CVE-2020-5142 | 6.1 | Oct 12 | A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface Affected: through 6.5.4.4 |
| CVE-2018-9867 | 5.5 | Feb 19 | In SonicWall SonicOS, administrators without full permissions can download imported certificates Affected: 6.5.0.2-8v_RC363 (VMWARE); 6.5.0.2.8v_RC367 (AZURE); 6.5.0.2.8v_RC368 (AWS); 6.5.0.2.8v_RC366 (HYPER_V) |
| CVE-2020-5143 | 5.3 | Oct 12 | SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses Affected: through 6.5.4.4 |
Showing 18