NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in SonicWall SMA100 SSLVPN
view advisory published 2024-12-06
SonicWall heeft kwetsbaarheden verholpen in de SMA100 SSLVPN (Specifiek voor firmware versies 10.2.1.13-72sv en eerder).
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-53703US | — | Exploit | ||
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stac… | ||||
| CVE-2024-53702US | — | — | ||
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by a… | ||||
| CVE-2024-45319US | —OT elevated | — | ||
A vulnerability in the SonicWall SMA100 SSLVPN
firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement duri… | ||||
| CVE-2024-45318US | — | — | ||
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution. | ||||
| CVE-2024-40763US | — | — | ||
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and… | ||||
| CVE-2024-38475US | critical9.1OT critical | KEV | ||
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the se… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan