IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
5.5Mittel

CVE-2023-6340

SonicWall Capture Client; SonicWall NetExtender Veröffentlicht: (vor 2 Jahren)

Beschreibung

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.

Schwachstellentyp (CWE): CWE-121

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
SonicWall Capture Client 3.7.10 and earlier versions
SonicWall NetExtender 10.2.337 and earlier versions

Referenzen und Patches

Neue CVEs im selben Produkt — SonicWall

5.1Mittel
CVE-2026-19703
SonicWall SonicOS

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limite…

5.9Mittel
CVE-2026-77709
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

5.9Mittel
CVE-2026-77708
SonicWall SonicOS

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

7.5Hoch
CVE-2026-82308
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

8.8Hoch
CVE-2026-107154
SonicWall SonicOS

A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.