Post-Authentication Path Traversal in SonicOS Enabling Restricted Service Access
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens.
SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.