Known vulnerabilities in SonicOS 6.5.4.v_21s-1288

Vendor: SonicWall
Software: SonicOS
Version: 6.5.4.v_21s-1288
Software CPE: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 13
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SonicOS version 6.5.4.v_21s-1288 SonicOS 6.5.4.v_21s-1288 is affected by 13 vulnerabilities: 3 high, 6 medium, 4 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141057 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2026-0516		 CWE-644 Low
No
No
 8.2.2-8015 06.08.2026 SB2026080638
#VU128470 - Weak Authentication
CVE-2026-0204		 CWE-1390 High
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0205		 CWE-22 Medium
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128472 - Stack-based buffer overflow
CVE-2026-0206		 CWE-121 Low
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU72721 - Improper Authentication
CVE-2023-1101		 CWE-287 Medium
No
No
 7.0.1-5111 02.03.2023 SB2023030249
#VU72720 - Stack-based buffer overflow
CVE-2023-0656		 CWE-121 Medium
Public exploit available
No
 7.0.1-5111 02.03.2023 SB2023030249
#VU62659 - Allocation of Resources Without Limits or Throttling
CVE-2022-22278		 CWE-770 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62658 - Cleartext Transmission of Sensitive Information
CVE-2022-22277		 CWE-319 Low
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62657 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22276		 CWE-200 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62656 - Resource exhaustion
CVE-2022-22275		 CWE-400 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU59236 - Stack-based buffer overflow
CVE-2021-20048		 CWE-121 High
No
No
 6.5.4.4-44V-21-1452, 6.5.4.9-92n 05.01.2022 SB2022010525
#VU59235 - Stack-based buffer overflow
CVE-2021-20046		 CWE-121 High
No
No
 6.5.4.9-92n 05.01.2022 SB2022010525
#VU57238 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2021-20031		 CWE-644 Low
Public exploit available
No
 6.5.1.13-1n, 6.5.4.v_21s-1288, 6.5.4.8-89n, 7.0.1-R1456, 7.0.1-5018-R1715, 7.0.1-5023-1349 12.10.2021 SB2021101206