PT-2018-16861 · Sonicwall · Sonicos

Benjamin K.M · Publicado 2018-01-08 · Atualizado 2024-06-15 · CVE-2018-5280

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability, which occurs via the Configure SSO screens. This allows for potential malicious script execution.

Recommendations For SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices, consider disabling access to the Configure SSO screens as a temporary workaround until a fix is available. Restricting user input in these screens can also help minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-5280

OPENSUSE-SU-2024:11290-1

Produtos afetados

Sonicos

Referências · 19

• 🔥 https://vulnerability-lab.com/get_content.php?id=1725 · Exploit
• https://suse.com/security/cve/CVE-2007-1995 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5280 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-5380 · Nota
• https://suse.com/security/cve/CVE-2018-5280 · Nota
• http://securityfocus.com/bid/102438 · Nota
• https://suse.com/security/cve/CVE-2017-16227 · Nota
• https://suse.com/security/cve/CVE-2018-5379 · Nota
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0001 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11290-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2223 · Nota
• https://suse.com/security/cve/CVE-2018-5381 · Nota
• https://suse.com/security/cve/CVE-2018-5278 · Nota
• https://suse.com/security/cve/CVE-2018-5281 · Nota
• https://suse.com/security/cve/CVE-2018-5279 · Nota