CVE-2023-39277 (GCVE-0-2023-39277)
Vulnerability from cvelistv5 – Published: 2023-10-17 22:08 – Updated: 2024-09-13 16:03
VLAI
EPSS
VEX
Summary
SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.
Severity
No CVSS data available.
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-13 16:02 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://psirt.global.sonicwall.com/vuln-detail/SN… | vendor-advisory |
Impacted products
Date Public
2023-10-17 22:08
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T18:02:06.752Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-39277",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-13T16:02:52.041284Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-13T16:03:01.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"modules": [
"Management",
"SSLVPN"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.0.1-5119 and earlier versions"
},
{
"status": "affected",
"version": "7.0.1-5129 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.4-44v-21-2079 and earlier versions"
},
{
"status": "affected",
"version": "6.5.4.12-101n and earlier versions"
}
]
}
],
"datePublic": "2023-10-17T22:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSonicOS post-authentication stack-based buffer overflow vulnerability \u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ein the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.\u003c/span\u003e"
}
],
"value": "\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-17T22:08:55.318Z",
"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
"shortName": "sonicwall"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
"assignerShortName": "sonicwall",
"cveId": "CVE-2023-39277",
"datePublished": "2023-10-17T22:08:55.318Z",
"dateReserved": "2023-07-27T00:07:04.124Z",
"dateUpdated": "2024-09-13T16:03:01.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-39277",
"date": "2026-09-17",
"epss": "0.00803",
"percentile": "0.54991"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.0.1-5145\", \"matchCriteriaId\": \"2C7049FD-8088-4FCE-886A-F4CF5E287D1C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BC4F132-D29A-4974-86DA-6E35AB05327C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15F2741F-3C32-4075-A224-BE272B50E3D9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC883B32-987C-4D34-8BBF-39E2C57A62EE\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F8B4A33E-8456-451E-AAF4-7F48BEDACF45\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F5B29EE-9D04-44CC-BB1F-C3C6130D2708\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"93914C8C-69ED-480C-80F2-4334C00788D8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE26ECE3-9E17-456F-A416-E23A758C9E4C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"67EEA85D-8F9E-4E41-B8B3-119738375A84\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DACDCE12-74C2-4F3C-8421-9191700514C5\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F0D33997-0D65-464E-8AA5-043499C667D1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3AF1ECB1-6257-41E3-A050-6467063F4807\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA838CC7-083A-4BF1-9C95-BED6F5A2992C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0171D69-14A6-4AB0-8377-C233F5E192D8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0883D805-1BA9-49CE-AEC7-51C9D9A69C5C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"70340DD4-687B-402C-85AF-C2B80D0F1600\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"52847BA2-470B-4078-A79B-52095DB9214B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4DBDD10C-F89D-4051-BC70-67B41167FF9B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C23940E-2F9D-447B-A740-42035ED5D400\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90C790AD-C40E-4527-8F83-D278282A9600\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"352DFCF9-E333-41C0-8033-91265768FD8E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C882C38-9DA5-4C03-BB23-AB2B448E3307\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.5.4.4-44v-21-2340\", \"matchCriteriaId\": \"9B91638E-FB80-4C65-8A37-827488CB3E2C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F5B29EE-9D04-44CC-BB1F-C3C6130D2708\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"93914C8C-69ED-480C-80F2-4334C00788D8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE26ECE3-9E17-456F-A416-E23A758C9E4C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"67EEA85D-8F9E-4E41-B8B3-119738375A84\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DACDCE12-74C2-4F3C-8421-9191700514C5\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F0D33997-0D65-464E-8AA5-043499C667D1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3AF1ECB1-6257-41E3-A050-6467063F4807\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA838CC7-083A-4BF1-9C95-BED6F5A2992C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0171D69-14A6-4AB0-8377-C233F5E192D8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0883D805-1BA9-49CE-AEC7-51C9D9A69C5C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.5.4.13-105n\", \"matchCriteriaId\": \"0D74A465-1A72-4A02-8A54-FD502BD28119\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F86D13F9-D41E-4230-9116-A781FFAEF00D\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8A24BCC0-CE41-49AF-B03D-D4FCB422503B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"043858A6-26AC-4EB0-A240-A43AD08C6AD5\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8FD73880-DC60-467F-99B6-69807D58A840\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73BB9452-A014-4A68-9662-63E6C60EEAD2\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B0CF683A-7E83-464B-8A0D-4CC641377FA6\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEF2B435-957C-4BBE-937D-23E4F33189EF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B485C543-DFCF-4481-92B4-F7198EE4FBD1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F030C5AB-36CA-445E-AC87-8DEE18DBB40E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4E8F3935-89B4-4091-9B8C-442C02FD4F3A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7268E89B-FF46-45AD-82FF-333505EF957B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0804FADE-57F7-452F-86B3-079701059D37\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9956F726-6D62-4616-B60A-4D3DD6F32105\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"29F4D403-F20A-4802-AAE9-9582486EB436\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"675F28A7-0BB3-4CDA-855E-7EFC650B512E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5983C650-84F6-4B2E-A27E-9E83EA1DDC02\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BDD4B412-7967-477F-929E-8F12A39186FF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1D996FA-52D1-47C2-87E6-682EEC9CA532\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9DEF6EE-000D-407D-AA2B-E039BA306A2A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCB8CDE6-8052-40F7-950F-05329499A58A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"\\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.\"}, {\"lang\": \"es\", \"value\": \"La vulnerabilidad de desbordamiento del b\\u00fafer de autenticaci\\u00f3n posterior de SonicOS en los endpoints de URL sonicflow.csv y appflowsessions.csv provoca una falla del firewall.\"}]",
"id": "CVE-2023-39277",
"lastModified": "2024-11-21T08:15:02.753",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}]}",
"published": "2023-10-17T23:15:11.660",
"references": "[{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\", \"source\": \"PSIRT@sonicwall.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "PSIRT@sonicwall.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"PSIRT@sonicwall.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-121\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-39277\",\"sourceIdentifier\":\"PSIRT@sonicwall.com\",\"published\":\"2023-10-17T23:15:11.660\",\"lastModified\":\"2026-06-17T06:11:53.907\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"\\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.\"},{\"lang\":\"es\",\"value\":\"La vulnerabilidad de desbordamiento del b\u00fafer de autenticaci\u00f3n posterior de SonicOS en los endpoints de URL sonicflow.csv y appflowsessions.csv provoca una falla del firewall.\"}],\"affected\":[{\"source\":\"PSIRT@sonicwall.com\",\"affectedData\":[{\"vendor\":\"SonicWall\",\"product\":\"SonicOS\",\"defaultStatus\":\"unknown\",\"modules\":[\"Management\",\"SSLVPN\"],\"versions\":[{\"version\":\"7.0.1-5119 and earlier versions\",\"status\":\"affected\"},{\"version\":\"7.0.1-5129 and earlier versions\",\"status\":\"affected\"},{\"version\":\"6.5.4.4-44v-21-2079 and earlier versions\",\"status\":\"affected\"},{\"version\":\"6.5.4.12-101n and earlier versions\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-13T16:02:52.041284Z\",\"id\":\"CVE-2023-39277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"PSIRT@sonicwall.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-121\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"7.0.1-5145\",\"matchCriteriaId\":\"2C7049FD-8088-4FCE-886A-F4CF5E287D1C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BC4F132-D29A-4974-86DA-6E35AB05327C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15F2741F-3C32-4075-A224-BE272B50E3D9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC883B32-987C-4D34-8BBF-39E2C57A62EE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8B4A33E-8456-451E-AAF4-7F48BEDACF45\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F5B29EE-9D04-44CC-BB1F-C3C6130D2708\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93914C8C-69ED-480C-80F2-4334C00788D8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE26ECE3-9E17-456F-A416-E23A758C9E4C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"67EEA85D-8F9E-4E41-B8B3-119738375A84\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DACDCE12-74C2-4F3C-8421-9191700514C5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0D33997-0D65-464E-8AA5-043499C667D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AF1ECB1-6257-41E3-A050-6467063F4807\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA838CC7-083A-4BF1-9C95-BED6F5A2992C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0171D69-14A6-4AB0-8377-C233F5E192D8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0883D805-1BA9-49CE-AEC7-51C9D9A69C5C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70340DD4-687B-402C-85AF-C2B80D0F1600\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52847BA2-470B-4078-A79B-52095DB9214B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DBDD10C-F89D-4051-BC70-67B41167FF9B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C23940E-2F9D-447B-A740-42035ED5D400\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90C790AD-C40E-4527-8F83-D278282A9600\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"352DFCF9-E333-41C0-8033-91265768FD8E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C882C38-9DA5-4C03-BB23-AB2B448E3307\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.5.4.4-44v-21-2340\",\"matchCriteriaId\":\"9B91638E-FB80-4C65-8A37-827488CB3E2C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F5B29EE-9D04-44CC-BB1F-C3C6130D2708\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93914C8C-69ED-480C-80F2-4334C00788D8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE26ECE3-9E17-456F-A416-E23A758C9E4C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"67EEA85D-8F9E-4E41-B8B3-119738375A84\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DACDCE12-74C2-4F3C-8421-9191700514C5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0D33997-0D65-464E-8AA5-043499C667D1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AF1ECB1-6257-41E3-A050-6467063F4807\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA838CC7-083A-4BF1-9C95-BED6F5A2992C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0171D69-14A6-4AB0-8377-C233F5E192D8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0883D805-1BA9-49CE-AEC7-51C9D9A69C5C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.5.4.13-105n\",\"matchCriteriaId\":\"0D74A465-1A72-4A02-8A54-FD502BD28119\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F86D13F9-D41E-4230-9116-A781FFAEF00D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A24BCC0-CE41-49AF-B03D-D4FCB422503B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"043858A6-26AC-4EB0-A240-A43AD08C6AD5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FD73880-DC60-467F-99B6-69807D58A840\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73BB9452-A014-4A68-9662-63E6C60EEAD2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0CF683A-7E83-464B-8A0D-4CC641377FA6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEF2B435-957C-4BBE-937D-23E4F33189EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B485C543-DFCF-4481-92B4-F7198EE4FBD1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F030C5AB-36CA-445E-AC87-8DEE18DBB40E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E8F3935-89B4-4091-9B8C-442C02FD4F3A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7268E89B-FF46-45AD-82FF-333505EF957B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0804FADE-57F7-452F-86B3-079701059D37\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9956F726-6D62-4616-B60A-4D3DD6F32105\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29F4D403-F20A-4802-AAE9-9582486EB436\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"675F28A7-0BB3-4CDA-855E-7EFC650B512E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5983C650-84F6-4B2E-A27E-9E83EA1DDC02\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDD4B412-7967-477F-929E-8F12A39186FF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1D996FA-52D1-47C2-87E6-682EEC9CA532\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9DEF6EE-000D-407D-AA2B-E039BA306A2A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB8CDE6-8052-40F7-950F-05329499A58A\"}]}]}],\"references\":[{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\",\"source\":\"PSIRT@sonicwall.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"current_release_date": "2025-05-29T00:31:52+00:00",
"cve": "CVE-2023-39277",
"id": "CVE-2023-39277",
"initial_release_date": "2023-10-17T22:08:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "CVE-2023-39277",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39277.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T18:02:06.752Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-39277\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-13T16:02:52.041284Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-13T16:02:57.392Z\"}}], \"cna\": {\"source\": {\"discovery\": \"UNKNOWN\"}, \"affected\": [{\"vendor\": \"SonicWall\", \"modules\": [\"Management\", \"SSLVPN\"], \"product\": \"SonicOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.1-5119 and earlier versions\"}, {\"status\": \"affected\", \"version\": \"7.0.1-5129 and earlier versions\"}, {\"status\": \"affected\", \"version\": \"6.5.4.4-44v-21-2079 and earlier versions\"}, {\"status\": \"affected\", \"version\": \"6.5.4.12-101n and earlier versions\"}], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2023-10-17T22:08:00.000Z\", \"references\": [{\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"\\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\\n\\n\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eSonicOS post-authentication stack-based buffer overflow vulnerability \u003c/span\u003e\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003ein the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.\u003c/span\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-121\", \"description\": \"CWE-121 Stack-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"44b2ff79-1416-4492-88bb-ed0da00c7315\", \"shortName\": \"sonicwall\", \"dateUpdated\": \"2023-10-17T22:08:55.318Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-39277\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-09-13T16:03:01.532Z\", \"dateReserved\": \"2023-07-27T00:07:04.124Z\", \"assignerOrgId\": \"44b2ff79-1416-4492-88bb-ed0da00c7315\", \"datePublished\": \"2023-10-17T22:08:55.318Z\", \"assignerShortName\": \"sonicwall\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…