Detections
Analytics

CVE-2023-0656

high

Description

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

References

https://bishopfox.com/blog/state-sonicwall-exposure-firmware-decryption-unlocks-insights

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004

Details

Source: Mitre, NVD

Published: 2023-03-02

Updated: 2023-03-10

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.38518

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability Being Monitored