CVE-2023-0656
high · 7.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
7.5
CVSS
41.3%
EPSS (exploit prob.)
99th
EPSS percentile
2023-03-02
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-121CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sonicos | <= 7.0.1-5111 |
| sonicwall | nsa_2700 | all versions |
| sonicwall | nsa_3700 | all versions |
| sonicwall | nsa_4700 | all versions |
| sonicwall | nsa_5700 | all versions |
| sonicwall | nsa_6700 | all versions |
| sonicwall | nssp_10700 | all versions |
| sonicwall | nssp_11700 | all versions |
| sonicwall | nssp_13700 | all versions |
| sonicwall | nsv_270 | all versions |
| sonicwall | nsv_470 | all versions |
| sonicwall | nsv_870 | all versions |
| sonicwall | tz270 | all versions |
| sonicwall | tz270w | all versions |
| sonicwall | tz370 | all versions |
| sonicwall | tz370w | all versions |
| sonicwall | tz470 | all versions |
| sonicwall | tz470w | all versions |
| sonicwall | tz570 | all versions |
| sonicwall | tz570p | all versions |
| sonicwall | tz570w | all versions |
| sonicwall | tz670 | all versions |
| sonicwall | sonicos | <= 7.0.1-5083 |
| sonicwall | nssp_15700 | all versions |
| sonicwall | sonicos | <= 6.5.4.4-44v-21-1551 |
| sonicwall | nsv_10 | all versions |
| sonicwall | nsv_100 | all versions |
| sonicwall | nsv_1600 | all versions |
| sonicwall | nsv_200 | all versions |
| sonicwall | nsv_25 | all versions |
| sonicwall | nsv_300 | all versions |
| sonicwall | nsv_400 | all versions |
| sonicwall | nsv_50 | all versions |
| sonicwall | nsv_800 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-0656