Sonicwall Sonicos vulnerabilities

CVE-2019-7474 [MEDIUM] CWE-248 CVE-2019-7474: A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOS

CVE-2024-29013 [MEDIUM] CWE-122 CVE-2024-29013: Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attac Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.

CVE-2020-5143 [MEDIUM] CWE-203 CVE-2020-5143: SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management ad SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.

CVE-2026-0206 [MEDIUM] CWE-121 CVE-2026-0206: A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacke A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

CVE-2024-12806 [MEDIUM] CWE-37 CVE-2024-12806: A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote at A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.

CVE-2026-0399 [MEDIUM] CWE-121 CVE-2026-0399: Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management i Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.

CVE-2020-5136 [MEDIUM] CWE-120 CVE-2020-5136: A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Servi A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.

CVE-2024-22396 [MEDIUM] CWE-190 CVE-2024-22396: An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

CVE-2026-3439 [MEDIUM] CWE-121 CVE-2026-3439: A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allo A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.

CVE-2026-0400 [MEDIUM] CWE-134 CVE-2026-0400: A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a fir A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVE-2020-5142 [MEDIUM] CWE-79 CVE-2020-5142: A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remo A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v

CVE-2018-5280 [MEDIUM] CWE-79 CVE-2018-5280: SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.

CVE-2020-5132 [MEDIUM] CWE-200 CVE-2020-5132: SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of

CVE-2026-0401 [MEDIUM] CWE-476 CVE-2026-0401: A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVE-2020-5130 [MEDIUM] CWE-20 CVE-2020-5130: SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.

CVE-2022-22277 [MEDIUM] CWE-200 CVE-2022-22277: A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive inform A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.

CVE-2026-0402 [MEDIUM] CWE-125 CVE-2026-0402: A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVE-2022-22276 [MEDIUM] CWE-200 CVE-2022-22276: A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthoriz A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user.

CVE-2018-9867 [MEDIUM] CWE-285 CVE-2018-9867: In SonicWall SonicOS, administrators without full permissions can download imported certificates. Oc In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8,

CVE-2015-3447 [MEDIUM] CWE-79 CVE-2015-3447: Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.