Vulnerability · Published Oct 17, 2023 · Assigned by sonicwall

CVE-2023-39277

Medium 6.5

In plain English

A medium-severity stack buffer overflow in SonicOS from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)1.0%top 38.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	SonicOS	7.0.1-5119 and earlier versions7.0.1-5129 and earlier versions6.5.4.4-44v-21-2079 and earlier versions6.5.4.12-101n and earlier versions

Weakness: CWE-121

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 vendor-advisory