PT-2023-2139 · Sonicwall · Sonicos

CVE-2023-0656 · Publicado 2023-02-02 · Atualizado 2026-03-01

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description The issue is related to a stack-based buffer overflow vulnerability in the SonicOS web interface. This vulnerability can be exploited by a remote unauthenticated attacker to cause a Denial of Service (DoS), potentially leading to the crash of an impacted firewall.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-121

CWE-787

Identificadores relacionados

BDU:2023-01877

CVE-2023-0656

Produtos afetados

Sonicos

Referências · 46

• 🔥 https://github.com/BishopFox/CVE-2022-22274_CVE-2023-0656 · Exploit
• https://twitter.com/kiirtanrosario/status/1747245963389907186 · Publicação no Twitter
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/8061 · Publicação no Telegram
• https://twitter.com/TheFinalHop/status/1747313383295094985 · Publicação no Twitter
• https://twitter.com/XynikIT/status/1746966258057195898 · Publicação no Twitter
• https://t.me/cvenotify/45393 · Publicação no Telegram
• https://twitter.com/XynikIT/status/1747253208865796371 · Publicação no Twitter
• https://twitter.com/FindSecCyber/status/1747550016137298257 · Publicação no Twitter
• https://twitter.com/YourAnonRiots/status/1747454947745317217 · Publicação no Twitter
• https://twitter.com/MalwareCarlos/status/1747351132232442215 · Publicação no Twitter
• https://t.me/true_secator/4134 · Publicação no Telegram
• https://twitter.com/CrazyAnonymou24/status/1750046309719986429 · Publicação no Twitter
• https://t.me/zerodayalert/143 · Publicação no Telegram
• https://t.me/aptreports/26375 · Publicação no Telegram