SO
Product
SonicOSv
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 7Low 0
Watch
Add SonicOSv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20019 | 7.5 | Jun 23 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data… Affected: 6.5.4.4-44v-21-955 |
| CVE-2020-5140 | 7.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads… Affected: through 6.5.4.4 |
| CVE-2020-5139 | 7.5 | Oct 12 | A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall… Affected: through 6.5.4.4 |
| CVE-2020-5138 | 7.5 | Oct 12 | A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash Affected: through 6.5.4.4 |
| CVE-2020-5137 | 7.5 | Oct 12 | A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash Affected: through 6.5.4.4 |
| CVE-2020-5133 | 7.5 | Oct 12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash Affected: through 6.5.4.4 |
| CVE-2019-7477 | 7.5 | Apr 2 | A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled Affected: 6.5.0.2-8v_rc363; 6.5.0.2.8v_rc366; 6.5.0.2.8v_rc367; 6.5.0.2.8v_rc368 |
| CVE-2019-7479 | 7.2 | Dec 31 | A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode Affected: 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v; 6.5.0.2.8v |
Showing 8