Home/Product/sonicwall sonicosv
Product

sonicwall sonicosv

19 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2022-22274
<= 6.5.4.4-44v-21-1452
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Deni
9.8CRITICAL
CVE-2021-20019
all versions
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potenti
7.5HIGH
CVE-2020-5143
<= 6.5.4.4
SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumerati
5.3MEDIUM
CVE-2020-5142
<= 6.5.4.4
A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is
6.1MEDIUM
CVE-2020-5141
<= 6.5.4.4
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN
6.5MEDIUM
CVE-2020-5140
<= 6.5.4.4
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN servic
7.5HIGH
CVE-2020-5139
<= 6.5.4.4
A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the rel
7.5HIGH
CVE-2020-5138
<= 6.5.4.4
A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the fire
7.5HIGH
CVE-2020-5137
<= 6.5.4.4
A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewa
7.5HIGH
CVE-2020-5136
<= 6.5.4.4
A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and vi
6.5MEDIUM
CVE-2020-5135
<= 6.5.4.4
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbit
9.8CRITICAL
CVE-2020-5134
<= 6.5.4.4
A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash
6.5MEDIUM
CVE-2020-5133
<= 6.5.4.4
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads
7.5HIGH
CVE-2019-7479
all versions
A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability a
7.2HIGH
CVE-2019-7477
all versions
A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CB
7.5HIGH
CVE-2019-7475
all versions
A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user
9.8CRITICAL
CVE-2019-7474
all versions
A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state
6.5MEDIUM
CVE-2018-9867
all versions
In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who a
5.5MEDIUM
CVE-2018-3639
all versions
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all
5.5MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin