Known vulnerabilities in SonicOS - page 2

Vendor: SonicWall
Software: SonicOS
Software CPE: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 58
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SonicOS SonicOS is affected by 58 known vulnerabilities: 1 critical, 13 high, 30 medium, 14 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96464 - Improper Access Control
CVE-2024-40766		 CWE-284 High
No
Exploited
 5.9.2.14-13o, 6.5.2.8-2n, 6.5.4.15.116n, 7.0.1-5035 22.08.2024 SB2024082295
#VU87483 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22397		 CWE-79 Low
No
No
 7.0.1-5151, 7.1.1-7051 13.03.2024 SB2024031306
#VU87482 - Integer overflow
CVE-2024-22396		 CWE-190 Medium
No
No
 6.5.4.v_21s_RC2395, 6.5.4.14-107n, 7.0.1-5151, 7.1.1-7051 13.03.2024 SB2024031305
#VU86242 - Improper Authentication
CVE-2024-22394		 CWE-287 High
No
No
 7.1.1-7047 08.02.2024 SB2024020803
#VU82063 - Improper Privilege Management
CVE-2023-41715		 CWE-269 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82062 - Use of Hard-coded Password
CVE-2023-41713		 CWE-259 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82061 - Stack-based buffer overflow
CVE-2023-41712		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82060 - Stack-based buffer overflow
CVE-2023-41711		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82059 - Stack-based buffer overflow
CVE-2023-39280		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82058 - Stack-based buffer overflow
CVE-2023-39279		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82057 - Reachable Assertion
CVE-2023-39278		 CWE-617 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82056 - Stack-based buffer overflow
CVE-2023-39277		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU82055 - Stack-based buffer overflow
CVE-2023-39276		 CWE-121 Medium
No
No
 6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145 16.10.2023 SB2023101650
#VU72721 - Improper Authentication
CVE-2023-1101		 CWE-287 Medium
No
No
 7.0.1-5111 02.03.2023 SB2023030249
#VU72720 - Stack-based buffer overflow
CVE-2023-0656		 CWE-121 Medium
Available
No
 7.0.1-5111 02.03.2023 SB2023030249
#VU62659 - Allocation of Resources Without Limits or Throttling
CVE-2022-22278		 CWE-770 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62658 - Cleartext Transmission of Sensitive Information
CVE-2022-22277		 CWE-319 Low
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62657 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22276		 CWE-200 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU62656 - Resource exhaustion
CVE-2022-22275		 CWE-400 Medium
No
No
 6.5.4.10-95n, 7.0.1.0-5051-R843, 7.0.1.0-5051-1511, 7.0.1-5051-R2624 27.04.2022 SB2022042717
#VU61613 - Stack-based buffer overflow
CVE-2022-22274		 CWE-121 High
Available
No
 6.5.4.4-44v-21-1519, 7.0.1-5030-HF-R844, 7.0.1-5051 25.03.2022 SB2022032502


Showing elements 21 - 40 out of 58