CVE-2024-22394

Use of an externally-controlled format string vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.

A stack-based buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

A stack-based buffer overflow vulnerability in SonicOS triggered via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially result in code execution in the firewall.

A Host Header Redirection vulnerability exists in SonicOS. A remote attacker could potentially redirect firewall management users to arbitrary web domains.

A pre-authentication heap-based buffer overflow vulnerability was identified in the SonicOS SSL-VPN service. It could allow a remote unauthenticated attacker to cause an application-level denial of service.

A pre-authentication heap-based buffer overflow vulnerability was identified in the SonicOS TACACS+ authentication client. Under specific conditions it could allow a remote unauthenticated attacker to cause an application-level denial of service.

A pre-authentication stack-based buffer overflow vulnerability was identified in the SonicOS TACACS+ authentication client. Under specific conditions it could allow a remote unauthenticated attacker to cause an application-level denial of service.

A weak password hashing vulnerability has been identified on SonicOS virtual appliances. Under specific conditions, an attacker with existing local access could disclose a platform credential that grants access to a limited subset of platform settings.