Vulnerability in Sonicwall Firmware

CVE-2003-1320

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References