Summary
Ein lokaler oder entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, die Authentifizierung zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.
Product
SonicOS ist das Betriebssystem von SonicWall Firewall-Produkten.
Vulnerabilities 8
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
Critical 9.8
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generato…
-
Critical 9.8
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
Medium 4.9
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an a…
Revision history
-
#3
CVE-2024-53704 wird ausgenutzt
-
#2
PoC aufgenommen
-
#1
Initiale Fassung
References
-
Sonic Security Advisory vom 2025-01-07
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013
-
Sonic Security Advisory vom 2025-01-07
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
-
Sonic Security Advisory vom 2025-01-07
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004
-
Arctic Wolf Blog vom 2025-02-16
https://arcticwolf.com/resources/blog/cve-2024-53704/