Search vulnerabilities

Results 9

Export CSV
CVE-2021-20027

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
Nsa 2650 Nsa 2700 Nsa 3650 and 56 more
CVE-2021-20031

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

CVSS 3.1 · 6.1 Medium EPSS 13.0% KEV · Not listed
Vendors
Products
Nsa 2650 Nsa 2700 Nsa 3650 and 56 more
CVE-2021-20046

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Products
Nsa 2650 Nsa 2700 Nsa 3650 and 56 more
CVE-2021-20048

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Products
Nsa 2650 Nsa 2700 Nsa 3650 and 56 more
CVE-2022-22275

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
Nsa 2650 Nsa 2700 Nsa 3650 and 50 more
CVE-2022-22278

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Nsa 2600 Nsa 2650 Nsa 2700 and 65 more