PSIRT@sonicwall.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS PSIRT@sonicwall.com
03
assessed vulnerabilities (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-29011US | —OT elevated | — | ||
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability.
This issue affects GMS: 9.3.4 and earlier versions.
| ||||
| CVE-2024-29010US | — | — | ||
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information.
This… | ||||
| CVE-2024-22395US | medium6.3 | — | ||
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated… | ||||
| CVE-2023-44218US | high7.8 | — | ||
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading… | ||||