Vulnerability · Published Jan 17, 2024 · Assigned by sonicwall
CVE-2023-6340
Medium 5.5
In plain English
A medium-severity stack buffer overflow in Capture Client from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 88.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Capture Client | 3.7.10 and earlier versions |
| SonicWall | NetExtender | 10.2.337 and earlier versions |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019 vendor-advisory