Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-39280: SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

CVE-2023-39280 · published 3 years ago

Summary

SonicOS p

ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sonicwall	sonicos	< 7.0.1-5145 < 6.5.4.4-44v-21-2340 < 6.5.4.13-105n `cpe:2.3:o:sonicwall:sonicos::::::::`

Original advisory text

SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

SonicOS p

ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-121Stack-based Buffer Overflow

CWE-787Out-of-bounds Write

Timeline

Published17 Oct 2023

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2023-39280 · NVD

Track software like this

Free during beta