Sonicwall Vulnérabilités

Chronologie

Taper

Firewall Software	157
Anti-Malware Software	18
Remote Access Software	5

Produit

SonicWALL SonicOS	40
SonicWALL GMS	16
SonicWALL Analytics	14
SonicWALL Viewpoint	14
SonicWALL SMA100	12

Contre-mesures

Official Fix	63
Temporary Fix	1
Workaround	4
Unavailable	3
Not Defined	109

Exploitabilité

High	15
Functional	0
Proof-of-Concept	30
Unproven	0
Not Defined	135

Vecteur d'accès

Not Defined	0
Physical	0
Local	8
Adjacent	31
Network	141

Authentification

Not Defined	0
High	4
Low	98
None	78

Interaction de l'utilisateur

Not Defined	0
Required	50
None	130

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	3
≤4	26
≤5	23
≤6	27
≤7	52
≤8	34
≤9	8
≤10	7

CVSSv3 Temp

≤1	0
≤2	0
≤3	3
≤4	28
≤5	28
≤6	27
≤7	49
≤8	30
≤9	12
≤10	3

VulDB

≤1	0
≤2	0
≤3	4
≤4	38
≤5	20
≤6	38
≤7	44
≤8	28
≤9	1
≤10	7

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	9
≤7	16
≤8	20
≤9	14
≤10	15

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	25
<2k	101
<5k	50
<10k	4
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	152
<2k	24
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (53): Analytics (15), Analytics On-Prem (2), Analyzer (1), AntiSpam (8), Aventail Sra Ex7000 (1), Capture Client (1), Continuous Data Protection (3), Directory Services Connector (2), E-mail Security (1), EMail (3), EMail Security Appliance (4), Email Security (8), Email Security Appliance (3), Email Security Appliance (1), Email Security Virtual Appliance (1), Firewall (1), GMS (18), Global Management System (3), Global VPN Client (6), Hosted Email Security (1), NSA (1), NetExtender (2), NetExtender Client (1), Pro (2), SMA 100 (11), SMA100 (15), SMA 200 (12), SMA 210 (12), SMA 400 (12), SMA 410 (12), SMA 500v (11), SMA1000 (5), SOHO (4), SOHO3 (1), SOHO Firewall (2), SSL-VPN End-Point Interrogator (1), SSL-VPN NetExtender Windows Client (1), SSL-VPN VirtualOffice (1), SSL VPN (3), Scrutinizer (6), Scrutinizer Dashboard (1), Secure Remote Access (1), Secure Remote Access 100 (1), Secure Remote Access Server (3), SonicOS (43), SonicOSv (3), Ssl Vpn 200 (1), Switch (2), Tele2 (1), UMA E5000 (1), ViewPoint (1), Viewpoint (14), installer Activex Control (1)

Link to Vendor Website: https://www.sonicwall.com/

Publié	Base	Temp	Vulnérabilité	Prod	Exp	Con	EPSS	CTI	CVE
13/03/2024	3.8	3.7	SonicWall Email Security Appliance directory traversal	Anti-Malware Software	Not Defined	Official Fix	0.00044	0.00	CVE-2024-22398
13/03/2024	2.4	2.3	SonicWall SonicOS SSLVPN Portal cross site scripting	Firewall Software	Not Defined	Official Fix	0.00043	0.06	CVE-2024-22397
13/03/2024	5.3	5.1	SonicWall SonicOS IPsec buffer overflow	Firewall Software	Not Defined	Official Fix	0.00043	0.00	CVE-2024-22396
23/02/2024	5.3	5.2	SonicWALL SMA 100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v MFA elévation de privilèges	Firewall Software	Not Defined	Official Fix	0.00043	0.03	CVE-2024-22395
08/02/2024	8.5	8.5	SonicWall SonicOS SSL-VPN authentification faible	Firewall Software	Not Defined	Not Defined	0.00091	0.05	CVE-2024-22394
16/01/2024	6.7	6.5	SonicWall Capture Client/NetExtender Client SFPMonitor.sys buffer overflow	Firewall Software	Not Defined	Official Fix	0.00043	0.03	CVE-2023-6340
06/12/2023	8.0	8.0	SonicWall SMA100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v MFA authentification faible	Firewall Software	Not Defined	Not Defined	0.00088	0.04	CVE-2023-5970
06/12/2023	5.9	5.9	SonicWall SMA100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v SSL-VPN Management Interface elévation de privilèges	Firewall Software	Not Defined	Not Defined	0.00076	0.06	CVE-2023-44221
27/10/2023	7.6	7.6	SonicWall NetExtender elévation de privilèges	Firewall Software	Not Defined	Not Defined	0.00042	0.02	CVE-2023-44220
27/10/2023	6.5	6.5	SonicWall Directory Services Connector Recovery elévation de privilèges	Firewall Software	Not Defined	Not Defined	0.00042	0.02	CVE-2023-44219
18/10/2023	7.5	7.5	SonicWALL SonicOS SSL VPN Tunnel authentification faible	Firewall Software	Not Defined	Not Defined	0.00050	0.03	CVE-2023-41715
18/10/2023	6.9	6.9	SonicWALL SonicOS Demo dynHandleBuyToolbar authentification faible	Firewall Software	Not Defined	Not Defined	0.00087	0.04	CVE-2023-41713
18/10/2023	6.1	6.1	SonicWALL SonicOS SSL VPN plainprefs.exp buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.03	CVE-2023-41712
18/10/2023	6.1	6.1	SonicWALL SonicOS sonicwall.exp buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.03	CVE-2023-41711
18/10/2023	6.1	6.1	SonicWALL SonicOS ssoStats-s.xml buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.00	CVE-2023-39280
18/10/2023	6.1	6.1	SonicWALL SonicOS sonicflow.csv buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.00	CVE-2023-39277
18/10/2023	6.1	6.1	SonicWALL SonicOS getPacketReplayData.json buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.00	CVE-2023-39279
18/10/2023	6.1	6.1	SonicWALL SonicOS main.cgi buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.00	CVE-2023-39278
18/10/2023	6.1	6.1	SonicWALL SonicOS getBookmarkList.json buffer overflow	Firewall Software	Not Defined	Not Defined	0.00044	0.00	CVE-2023-39276
13/07/2023	8.0	8.0	SonicWALL GMS/Analytics CAS Web Services Application authentification faible	Firewall Software	Not Defined	Not Defined	0.00091	0.02	CVE-2023-34137
13/07/2023	8.0	8.0	SonicWALL GMS/Analytics elévation de privilèges	Firewall Software	Not Defined	Not Defined	0.00094	0.00	CVE-2023-34136
13/07/2023	5.0	5.0	SonicWALL GMS/Analytics Web Service divulgation de l'information	Firewall Software	Not Defined	Not Defined	0.00049	0.00	CVE-2023-34134
13/07/2023	5.9	5.9	SonicWALL GMS/Analytics divulgation de l'information	Firewall Software	Not Defined	Not Defined	0.00065	0.00	CVE-2023-34133
13/07/2023	6.4	6.4	SonicWALL GMS/Analytics divulgation de l'information	Firewall Software	Not Defined	Not Defined	0.00068	0.00	CVE-2023-34132
13/07/2023	4.8	4.8	SonicWALL GMS/Analytics divulgation de l'information	Firewall Software	Not Defined	Not Defined	0.00052	0.00	CVE-2023-34131

Sonicwall Vulnérabilités

Chronologie

Taper

Produit

Contre-mesures

Exploitabilité

Vecteur d'accès

Authentification

Interaction de l'utilisateur

C3BM Index

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Fournisseur

Research

Exploiter 0 jour

Exploiter aujourd'hui

Exploiter le volume du marché

🔴 CTI Activités

🔒 Login Required

Are you interested in using VulDB?