SonicWall SonicOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
117 matching records
- Critical9.8Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).Check if you run itEPSS 8.97%Aug 9, 2019
- Critical9.8Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).Check this weekEPSS 23.25%Aug 9, 2019
- High7.5Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.Check this weekEPSS 22.95%Aug 9, 2019
- Critical9.8windriver vxworks Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 75.25%Aug 9, 2019
- Medium5.3Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.Check this weekEPSS 59.80%Aug 9, 2019
- High8.1windriver vxworks Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 3.16%Aug 9, 2019
- High7.5Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.Check this weekEPSS 15.88%Aug 9, 2019
- High8.8Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.Check this weekEPSS 84.30%Aug 9, 2019
- Critical9.8Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.Check this weekEPSS 26.83%Aug 9, 2019
- High7.5A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled.Check if you run itEPSS 1.19%Apr 2, 2019
- Critical9.8A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services.Check if you run itEPSS 1.39%Apr 2, 2019
- Medium6.5A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with speci…Check if you run itEPSS 0.67%Apr 2, 2019
- Medium5.5In SonicWall SonicOS, administrators without full permissions can download imported certificates.Check if you run itEPSS 0.21%Feb 19, 2019
- UnknownSonicWall global_management_system Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.50%Oct 27, 2018
- Medium5.4SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens.Check if you run itEPSS 2.53%Jan 8, 2018
- Medium5.4SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.Check if you run itEPSS 2.51%Jan 8, 2018
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web sc…Check if you run itEPSS 2.34%Apr 29, 2015