Sonicwall 漏洞

时间轴

类型

产品

SonicWALL SonicOS40
SonicWALL GMS16
SonicWALL Analytics14
SonicWALL Viewpoint14
SonicWALL SMA10012

修正

Official Fix63
Temporary Fix1
Workaround4
Unavailable3
Not Defined109

易受攻击性

High9
Functional0
Proof-of-Concept30
Unproven0
Not Defined141

访问向量

Not Defined0
Physical0
Local8
Adjacent31
Network141

身份验证

Not Defined0
High4
Low98
None78

用户交互

Not Defined0
Required50
None130

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤426
≤523
≤627
≤752
≤834
≤98
≤107

CVSSv3 Temp

≤10
≤20
≤33
≤428
≤528
≤627
≤749
≤830
≤912
≤103

VulDB

≤10
≤20
≤34
≤438
≤520
≤638
≤744
≤828
≤91
≤107

NVD

≤10
≤20
≤30
≤40
≤52
≤69
≤716
≤820
≤914
≤1015

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k25
<2k97
<5k54
<10k4
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k154
<2k22
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (53): Analytics (15), Analytics On-Prem (2), Analyzer (1), AntiSpam (8), Aventail Sra Ex7000 (1), Capture Client (1), Continuous Data Protection (3), Directory Services Connector (2), E-mail Security (1), EMail (3), EMail Security Appliance (4), Email Security (8), Email Security Appliance (3), Email Security Appliance (1), Email Security Virtual Appliance (1), Firewall (1), GMS (18), Global Management System (3), Global VPN Client (6), Hosted Email Security (1), NSA (1), NetExtender (2), NetExtender Client (1), Pro (2), SMA 100 (11), SMA100 (15), SMA 200 (12), SMA 210 (12), SMA 400 (12), SMA 410 (12), SMA 500v (11), SMA1000 (5), SOHO (4), SOHO3 (1), SOHO Firewall (2), SSL-VPN End-Point Interrogator (1), SSL-VPN NetExtender Windows Client (1), SSL-VPN VirtualOffice (1), SSL VPN (3), Scrutinizer (6), Scrutinizer Dashboard (1), Secure Remote Access (1), Secure Remote Access 100 (1), Secure Remote Access Server (3), SonicOS (43), SonicOSv (3), Ssl Vpn 200 (1), Switch (2), Tele2 (1), UMA E5000 (1), ViewPoint (1), Viewpoint (14), installer Activex Control (1)

Link to Vendor Website: https://www.sonicwall.com/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-03-133.83.7SonicWall Email Security Appliance 目录遍历Anti-Malware SoftwareNot DefinedOfficial Fix0.000440.00CVE-2024-22398
2024-03-132.42.3SonicWall SonicOS SSLVPN Portal 跨网站脚本Firewall SoftwareNot DefinedOfficial Fix0.000430.06CVE-2024-22397
2024-03-135.35.1SonicWall SonicOS IPsec 内存损坏Firewall SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-22396
2024-02-235.35.2SonicWALL SMA 100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v MFA 权限升级Firewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-22395
2024-02-088.58.5SonicWall SonicOS SSL-VPN 弱身份验证Firewall SoftwareNot DefinedNot Defined0.000910.00CVE-2024-22394
2024-01-166.76.5SonicWall Capture Client/NetExtender Client SFPMonitor.sys 内存损坏Firewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2023-6340
2023-12-068.08.0SonicWall SMA100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v MFA 弱身份验证Firewall SoftwareNot DefinedNot Defined0.000880.00CVE-2023-5970
2023-12-065.95.9SonicWall SMA100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v SSL-VPN Management Interface 权限升级Firewall SoftwareNot DefinedNot Defined0.000760.06CVE-2023-44221
2023-10-277.67.6SonicWall NetExtender 权限升级Firewall SoftwareNot DefinedNot Defined0.000420.02CVE-2023-44220
2023-10-276.56.5SonicWall Directory Services Connector Recovery 权限升级Firewall SoftwareNot DefinedNot Defined0.000420.02CVE-2023-44219
2023-10-187.57.5SonicWALL SonicOS SSL VPN Tunnel 弱身份验证Firewall SoftwareNot DefinedNot Defined0.000500.03CVE-2023-41715
2023-10-186.96.9SonicWALL SonicOS Demo dynHandleBuyToolbar 弱身份验证Firewall SoftwareNot DefinedNot Defined0.000870.00CVE-2023-41713
2023-10-186.16.1SonicWALL SonicOS SSL VPN plainprefs.exp 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.03CVE-2023-41712
2023-10-186.16.1SonicWALL SonicOS sonicwall.exp 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.03CVE-2023-41711
2023-10-186.16.1SonicWALL SonicOS ssoStats-s.xml 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.00CVE-2023-39280
2023-10-186.16.1SonicWALL SonicOS sonicflow.csv 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.00CVE-2023-39277
2023-10-186.16.1SonicWALL SonicOS getPacketReplayData.json 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.00CVE-2023-39279
2023-10-186.16.1SonicWALL SonicOS main.cgi 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.00CVE-2023-39278
2023-10-186.16.1SonicWALL SonicOS getBookmarkList.json 内存损坏Firewall SoftwareNot DefinedNot Defined0.000440.00CVE-2023-39276
2023-07-138.08.0SonicWALL GMS/Analytics CAS Web Services Application 弱身份验证Firewall SoftwareNot DefinedNot Defined0.000910.02CVE-2023-34137
2023-07-138.08.0SonicWALL GMS/Analytics 权限升级Firewall SoftwareNot DefinedNot Defined0.000940.00CVE-2023-34136
2023-07-135.05.0SonicWALL GMS/Analytics Web Service 信息公开Firewall SoftwareNot DefinedNot Defined0.000490.00CVE-2023-34134
2023-07-135.95.9SonicWALL GMS/Analytics 信息公开Firewall SoftwareNot DefinedNot Defined0.000650.00CVE-2023-34133
2023-07-136.46.4SonicWALL GMS/Analytics 信息公开Firewall SoftwareNot DefinedNot Defined0.000680.00CVE-2023-34132
2023-07-134.84.8SonicWALL GMS/Analytics 信息公开Firewall SoftwareNot DefinedNot Defined0.000520.00CVE-2023-34131

155 更多条目未显示

Do you want to use VulDB in your project?

Use the official API to access entries easily!