Sonicwall: >> Sonicos >> 6.5.4.5 Security Vulnerabilities
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
CVSS Score
8.0
EPSS Score
0.0
Published
2026-04-29
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVSS Score
6.8
EPSS Score
0.0
Published
2026-04-29
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
CVSS Score
4.9
EPSS Score
0.002
Published
2026-04-29
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.
CVSS Score
4.9
EPSS Score
0.001
Published
2026-03-04
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVSS Score
4.9
EPSS Score
0.002
Published
2026-02-24
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVSS Score
4.9
EPSS Score
0.003
Published
2026-02-24
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVSS Score
4.9
EPSS Score
0.002
Published
2026-02-24
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
CVSS Score
4.9
EPSS Score
0.001
Published
2026-02-24
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
CVSS Score
7.5
EPSS Score
0.0
Published
2025-11-20
CVE-2024-40766
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Known exploited
CVSS Score
9.8
EPSS Score
0.034
Published
2024-08-23
Page 1