Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sonicwall vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-34125
Path Traversal vulnerability in GMS and Analytics allows an authenticated malicious user to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and previous versions versions; Analytics: 2.5.0.4-R7 and previous versions vers...
Sonicwall Global Management System
Sonicwall Analytics
Sonicwall Global Management System 9.3.2
NA
CVE-2023-34126
Vulnerability in SonicWall GMS and Analytics allows an authenticated malicious user to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and previous versions versions; Analytics: 2.5.0.4-R7 and previous versions versions.
Sonicwall Global Management System
Sonicwall Analytics
Sonicwall Global Management System 9.3.2
NA
CVE-2023-34127
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated malicious user to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and p...
Sonicwall Global Management System
Sonicwall Analytics
Sonicwall Global Management System 9.3.2
NA
CVE-2023-34128
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and previous versions versions; Analytics: 2.5.0.4-R7 and previous versions versions.
Sonicwall Global Management System
Sonicwall Analytics
Sonicwall Global Management System 9.3.2
NA
CVE-2023-34123
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and previous versions versions; Analytics: 2.5.0.4-R7 and previous versions versions.
Sonicwall Global Management System 9.3.2
Sonicwall Global Management System
Sonicwall Analytics
Sonicwall Analytics 2.5.0.4-r7
NA
CVE-2022-47522
The IEEE 802.11 specifications up to and including 802.11ax allow physically proximate malicious users to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to...
Ieee Ieee 802.11
Sonicwall Tz670 Firmware -
Sonicwall Tz570 Firmware -
Sonicwall Tz570p Firmware -
Sonicwall Tz570w Firmware -
Sonicwall Tz470 Firmware -
Sonicwall Tz470w Firmware -
Sonicwall Tz370 Firmware -
Sonicwall Tz370w Firmware -
Sonicwall Tz270 Firmware -
Sonicwall Tz270w Firmware -
Sonicwall Tz600 Firmware -
Sonicwall Tz600p Firmware -
Sonicwall Tz500 Firmware -
Sonicwall Tz500w Firmware -
Sonicwall Tz400 Firmware -
Sonicwall Tz400w Firmware -
Sonicwall Tz350 Firmware -
Sonicwall Tz350w Firmware -
Sonicwall Tz300 Firmware -
Sonicwall Tz300p Firmware -
Sonicwall Tz300w Firmware -
2 Github repositories
1 Article
NA
CVE-2023-1101
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated malicious user to use excessive MFA codes.
Sonicwall Sonicos
NA
CVE-2023-0656
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated malicious user to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
Sonicwall Sonicos
1 Github repository
1 Article
NA
CVE-2023-0655
SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses.
Sonicwall Email Security
NA
CVE-2023-0126
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated malicious user to access arbitrary files and directories stored outside the web root directory.
Sonicwall Sma1000 Firmware 12.4.2
2 Github repositories
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code execution
CVE-2024-34909
CVE-2024-3317
SSTI
CVE-2024-3400
CVE-2024-30051
wireless
CVE-2024-4622
CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »