Sonicwall Sonicosv
19 CVEs affecting Sonicwall Sonicosv. Latest disclosed: 2022-03-25. Critical: 3, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22274 | Critical | 9.8 | 2022-03-25 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potent… |
CVE-2020-5135 | Critical | 9.8 | 2020-10-12 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malici… |
CVE-2019-7475 | Critical | 9.8 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing s… |
CVE-2021-20019 | High | 7.5 | 2021-06-23 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sens… |
CVE-2020-5140 | High | 7.5 | 2020-10-12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP… |
CVE-2020-5139 | High | 7.5 | 2020-10-12 | A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and l… |
CVE-2020-5138 | High | 7.5 | 2020-10-12 | A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads… |
CVE-2020-5137 | High | 7.5 | 2020-10-12 | A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads t… |
CVE-2020-5133 | High | 7.5 | 2020-10-12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vu… |
CVE-2019-7477 | High | 7.5 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled… |
CVE-2019-7479 | High | 7.2 | 2019-12-31 | A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version… |
CVE-2020-5141 | Medium | 6.5 | 2020-10-12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability… |
CVE-2020-5136 | Medium | 6.5 | 2020-10-12 | A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which le… |
CVE-2020-5134 | Medium | 6.5 | 2020-10-12 | A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected… |
CVE-2019-7474 | Medium | 6.5 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate wi… |
CVE-2020-5142 | Medium | 6.1 | 2020-10-12 | A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentiall… |
CVE-2018-9867 | Medium | 5.5 | 2019-02-19 | In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Admin… |
CVE-2018-3639 | Medium | 5.5 | 2018-05-22 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are know… |
CVE-2020-5143 | Medium | 5.3 | 2020-10-12 | SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server respon… |