CVE-2023-41713
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
SonicOS contains a use of hard-coded password vulnerability in the 'dynHandleBuyToolbar' demo function. The hardcoded credential is embedded in the demo component.
Risk Assessment
Anyone aware of the hardcoded password could gain unauthorized access to functionality protected by that credential. This poses a risk to confidentiality and integrity of the system.
Recommendation
Update SonicOS to a version where the hardcoded password has been removed, or disable the 'dynHandleBuyToolbar' demo function if it is not needed.
Other vulnerabilities in SonicOS
See all- CVE-2026-19868HighActively exploited
An authentication enforcement vulnerability in the SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
- CVE-2025-40600Critical
Use of an externally-controlled format string vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
- CVE-2024-22394Critical
An improper authentication vulnerability has been identified in the SonicWall SonicOS SSL-VPN feature, which under specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040.
- CVE-2023-0656High
A stack-based buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
- CVE-2022-22274Critical
A stack-based buffer overflow vulnerability in SonicOS triggered via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially result in code execution in the firewall.
- CVE-2021-20031Medium
A Host Header Redirection vulnerability exists in SonicOS. A remote attacker could potentially redirect firewall management users to arbitrary web domains.
- CVE-2020-5135CriticalActively exploited
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. It affects SonicOS Gen 6 versions 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
- CVE-2026-82308High
A pre-authentication heap-based buffer overflow vulnerability was identified in the SonicOS SSL-VPN service. It could allow a remote unauthenticated attacker to cause an application-level denial of service.
- CVE-2026-77709Medium
A pre-authentication heap-based buffer overflow vulnerability was identified in the SonicOS TACACS+ authentication client. Under specific conditions it could allow a remote unauthenticated attacker to cause an application-level denial of service.
- CVE-2026-77708Medium
A pre-authentication stack-based buffer overflow vulnerability was identified in the SonicOS TACACS+ authentication client. Under specific conditions it could allow a remote unauthenticated attacker to cause an application-level denial of service.
Original NVD description (English source)
SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS