Sonicwall Nsa_9250
9 CVEs affecting Sonicwall Nsa_9250. Latest disclosed: 2023-03-02. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1101 | High | 8.8 | 2023-03-02 | SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes. |
CVE-2021-20048 | High | 8.8 | 2022-01-10 | A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potenti… |
CVE-2021-20046 | High | 8.8 | 2022-01-10 | A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and po… |
CVE-2022-22278 | High | 7.5 | 2022-04-27 | A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access p… |
CVE-2022-22275 | High | 7.5 | 2022-04-27 | Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting… |
CVE-2021-20027 | High | 7.5 | 2021-06-14 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerabili… |
CVE-2021-20031 | Medium | 6.1 | 2021-10-12 | A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains. |
CVE-2022-22277 | Medium | 5.3 | 2022-04-27 | A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. |
CVE-2022-22276 | Medium | 5.3 | 2022-04-27 | A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. |