Medium WID-SEC-2023-2781 4 CVEs

SonicWall SMA: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Oct 30, 2023 · Updated Oct 30, 2023 · de-DE

Vendor: SonicWall Product: SMA Product: SMA 100 Product: SMA 1000 Product: SMA Connect Tunnel Product: SMA Mobile Connect Product: SMA NetExtender Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SonicWall SMA ausnutzen, um Informationen offenzulegen.

Product

SonicWall SMA ist ein Secure Access Gateway, mit dem Organisationen Zugang zu geschäftskritischen Unternehmensressourcen bereitstellen können.

Vulnerabilities 4

Medium 5.7

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a lo…

wireguard wireguard Ubuntu PyPI

Aug 9, 2023
Unscored —

CVE-2023-36671

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the…

Aug 9, 2023
Unscored —

CVE-2023-36672

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the…

wireguard Ubuntu

Aug 9, 2023
Unscored —

CVE-2023-36673

An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operati…

Aug 9, 2023

Revision history

2023-10-30 #1
Initiale Fassung

References

Sonicwall Security Advisory vom 2023-10-30
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015