PT-2023-28057 · Sonicwall · Sonicos

CVE-2023-41711

·

Publicado

2023-10-17

·

Atualizado

2023-10-19

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)
Description The issue is a post-authentication Stack-Based Buffer Overflow Vulnerability. It affects the "sonicwall.exp" and "prefs.exp" URL endpoints, leading to a firewall crash.
Recommendations As a temporary workaround, consider restricting access to the "sonicwall.exp" and "prefs.exp" URL endpoints until a patch is available. Avoid using the affected endpoints in the meantime to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-41711

Produtos afetados

Sonicos