CVE-2024-22396
Medium
Description
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.
SeverityMedium
CVSS5.3
Exploit probability—
Product
SonicOS
PublishedMar 14, 2024
First seenMar 14, 2024
Weakness typeCWE-190Integer overflow
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall SonicOS | 7.0.1-5145 and earlier versions, 7.1.1-7047 and earlier versions, 6.5.4.13-105n and earlier versions, 6.5.4.4-44v-21-2340 and earlier versions | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.