PT-2023-2139 · Sonicwall · Sonicos

Published 2023-02-02 · Updated 2026-03-01 · CVE-2023-0656

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description The issue is related to a stack-based buffer overflow vulnerability in the SonicOS web interface. This vulnerability can be exploited by a remote unauthenticated attacker to cause a Denial of Service (DoS), potentially leading to the crash of an impacted firewall.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-01877

CVE-2023-0656

Affected Products

Sonicos

References · 46

• 🔥 https://github.com/BishopFox/CVE-2022-22274_CVE-2023-0656 · Exploit
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0656 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0656 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01877 · Security Note
• https://twitter.com/kiirtanrosario/status/1747245963389907186 · Twitter Post
• https://t.me/cybersecuritytechnologies/8061 · Telegram Post
• https://twitter.com/TheFinalHop/status/1747313383295094985 · Twitter Post
• https://twitter.com/XynikIT/status/1746966258057195898 · Twitter Post
• https://t.me/cvenotify/45393 · Telegram Post
• https://twitter.com/XynikIT/status/1747253208865796371 · Twitter Post
• https://twitter.com/FindSecCyber/status/1747550016137298257 · Twitter Post
• https://twitter.com/YourAnonRiots/status/1747454947745317217 · Twitter Post
• https://twitter.com/MalwareCarlos/status/1747351132232442215 · Twitter Post
• https://t.me/true_secator/4134 · Telegram Post