CVE-2024-40764 - Vulnerability Details

Vendors	Products
Sonicwall	Nsa 2700 Nsa 3700 Nsa 4700 Nsa 5700 Nsa 6700 Nssp 10700 Nssp 11700 Nssp 13700 Nssp 15700 Nsv10 Nsv100 Nsv1600 Nsv200 Nsv25 Nsv300 Nsv400 Nsv50 Nsv800 Nsv 270 Nsv 470 Nsv 870 Sonicos Tz270 Tz270w Tz370 Tz370w Tz470 Tz470w Tz570 Tz570p Tz570w Tz670

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012

Type	Values Removed	Values Added
First Time appeared		Sonicwall Sonicwall nsa 2700 Sonicwall nsa 3700 Sonicwall nsa 4700 Sonicwall nsa 5700 Sonicwall nsa 6700 Sonicwall nssp 10700 Sonicwall nssp 11700 Sonicwall nssp 13700 Sonicwall nssp 15700 Sonicwall nsv10 Sonicwall nsv100 Sonicwall nsv1600 Sonicwall nsv200 Sonicwall nsv25 Sonicwall nsv300 Sonicwall nsv400 Sonicwall nsv50 Sonicwall nsv800 Sonicwall nsv 270 Sonicwall nsv 470 Sonicwall nsv 870 Sonicwall sonicos Sonicwall tz270 Sonicwall tz270w Sonicwall tz370 Sonicwall tz370w Sonicwall tz470 Sonicwall tz470w Sonicwall tz570 Sonicwall tz570p Sonicwall tz570w Sonicwall tz670
Weaknesses		CWE-787
CPEs		cpe:2.3:h:sonicwall:nsa_2700:-:::::::* cpe:2.3:h:sonicwall:nsa_3700:-:::::::* cpe:2.3:h:sonicwall:nsa_4700:-:::::::* cpe:2.3:h:sonicwall:nsa_5700:-:::::::* cpe:2.3:h:sonicwall:nsa_6700:-:::::::* cpe:2.3:h:sonicwall:nssp_10700:-:::::::* cpe:2.3:h:sonicwall:nssp_11700:-:::::::* cpe:2.3:h:sonicwall:nssp_13700:-:::::::* cpe:2.3:h:sonicwall:nssp_15700:-:::::::* cpe:2.3:h:sonicwall:nsv100:-:::::::* cpe:2.3:h:sonicwall:nsv10:-:::::::* cpe:2.3:h:sonicwall:nsv1600:-:::::::* cpe:2.3:h:sonicwall:nsv200:-:::::::* cpe:2.3:h:sonicwall:nsv25:-:::::::* cpe:2.3:h:sonicwall:nsv300:-:::::::* cpe:2.3:h:sonicwall:nsv400:-:::::::* cpe:2.3:h:sonicwall:nsv50:-:::::::* cpe:2.3:h:sonicwall:nsv800:-:::::::* cpe:2.3:h:sonicwall:nsv_270:-:::::::* cpe:2.3:h:sonicwall:nsv_470:-:::::::* cpe:2.3:h:sonicwall:nsv_870:-:::::::* cpe:2.3:h:sonicwall:tz270:-:::::::* cpe:2.3:h:sonicwall:tz270w:-:::::::* cpe:2.3:h:sonicwall:tz370:-:::::::* cpe:2.3:h:sonicwall:tz370w:-:::::::* cpe:2.3:h:sonicwall:tz470:-:::::::* cpe:2.3:h:sonicwall:tz470w:-:::::::* cpe:2.3:h:sonicwall:tz570:-:::::::* cpe:2.3:h:sonicwall:tz570p:-:::::::* cpe:2.3:h:sonicwall:tz570w:-:::::::* cpe:2.3:h:sonicwall:tz670:-:::::::* cpe:2.3:o:sonicwall:sonicos::::::::
Vendors & Products		Sonicwall Sonicwall nsa 2700 Sonicwall nsa 3700 Sonicwall nsa 4700 Sonicwall nsa 5700 Sonicwall nsa 6700 Sonicwall nssp 10700 Sonicwall nssp 11700 Sonicwall nssp 13700 Sonicwall nssp 15700 Sonicwall nsv10 Sonicwall nsv100 Sonicwall nsv1600 Sonicwall nsv200 Sonicwall nsv25 Sonicwall nsv300 Sonicwall nsv400 Sonicwall nsv50 Sonicwall nsv800 Sonicwall nsv 270 Sonicwall nsv 470 Sonicwall nsv 870 Sonicwall sonicos Sonicwall tz270 Sonicwall tz270w Sonicwall tz370 Sonicwall tz370w Sonicwall tz470 Sonicwall tz470w Sonicwall tz570 Sonicwall tz570p Sonicwall tz570w Sonicwall tz670

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-40764", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2024-07-10T15:58:49.461Z", "datePublished": "2024-07-18T07:42:37.995Z", "dateUpdated": "2024-08-02T04:39:54.567Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Gen6", "Gen7"], "product": "SonicOS", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "6.5.4.4-44v-21-2395 and older versions"}, {"status": "affected", "version": "7.0.1-5151 and older versions"}, {"status": "affected", "version": "7.1.1-7051 and older versions"}]}], "datePublic": "2024-07-18T07:38:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)."}], "value": "Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2024-07-18T07:42:37.995Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012"}], "source": {"advisory": "SNWLID-2024-0012", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "sonicwall", "product": "sonicos", "cpes": ["cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.5.4.4-44v-21-2395", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "7.0.1-5151", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "7.1.1-7051", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-07-18T13:27:59.874514Z", "id": "CVE-2024-40764", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-18T13:37:13.495Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:39:54.567Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012"}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-40764 (string)

assignerOrgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

state : PUBLISHED (string)

assignerShortName : sonicwall (string)

dateReserved : 2024-07-10T15:58:49.461Z (string)

datePublished : 2024-07-18T07:42:37.995Z (string)

dateUpdated : 2024-08-02T04:39:54.567Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unknown (string)

platforms : [ »

0 : Gen6 (string)

1 : Gen7 (string)

]

product : SonicOS (string)

vendor : SonicWall (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.5.4.4-44v-21-2395 and older versions (string)

}

1 : { »

status : affected (string)

version : 7.0.1-5151 and older versions (string)

}

2 : { »

status : affected (string)

version : 7.1.1-7051 and older versions (string)

}

]

}

]

datePublic : 2024-07-18T07:38:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). (string)

}

]

value : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-122 (string)

description : CWE-122 Heap-based Buffer Overflow (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

shortName : sonicwall (string)

dateUpdated : 2024-07-18T07:42:37.995Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

}

]

source : { »

advisory : SNWLID-2024-0012 (string)

discovery : EXTERNAL (string)

}

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : sonicwall (string)

product : sonicos (string)

cpes : [ »

0 : cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 6.5.4.4-44v-21-2395 (string)

versionType : custom (string)

}

1 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 7.0.1-5151 (string)

versionType : custom (string)

}

2 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 7.1.1-7051 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-07-18T13:27:59.874514Z (string)

id : CVE-2024-40764 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-18T13:37:13.495Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:39:54.567Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:39:54.567Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-40764", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-18T13:27:59.874514Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*"], "vendor": "sonicwall", "product": "sonicos", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "6.5.4.4-44v-21-2395"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.0.1-5151"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.1.1-7051"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-18T13:31:47.218Z"}}], "cna": {"source": {"advisory": "SNWLID-2024-0012", "discovery": "EXTERNAL"}, "affected": [{"vendor": "SonicWall", "product": "SonicOS", "versions": [{"status": "affected", "version": "6.5.4.4-44v-21-2395 and older versions"}, {"status": "affected", "version": "7.0.1-5151 and older versions"}, {"status": "affected", "version": "7.1.1-7051 and older versions"}], "platforms": ["Gen6", "Gen7"], "defaultStatus": "unknown"}], "datePublic": "2024-07-18T07:38:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).", "supportingMedia": [{"type": "text/html", "value": "Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2024-07-18T07:42:37.995Z"}}}, "cveMetadata": {"cveId": "CVE-2024-40764", "state": "PUBLISHED", "dateUpdated": "2024-08-02T04:39:54.567Z", "dateReserved": "2024-07-10T15:58:49.461Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2024-07-18T07:42:37.995Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:39:54.567Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-40764 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-07-18T13:27:59.874514Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* (string)

]

vendor : sonicwall (string)

product : sonicos (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 6.5.4.4-44v-21-2395 (string)

}

1 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 7.0.1-5151 (string)

}

2 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 7.1.1-7051 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-18T13:31:47.218Z (string)

}

]

cna : { »

source : { »

advisory : SNWLID-2024-0012 (string)

discovery : EXTERNAL (string)

}

affected : [ »

0 : { »

vendor : SonicWall (string)

product : SonicOS (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.5.4.4-44v-21-2395 and older versions (string)

}

1 : { »

status : affected (string)

version : 7.0.1-5151 and older versions (string)

}

2 : { »

status : affected (string)

version : 7.1.1-7051 and older versions (string)

}

]

platforms : [ »

0 : Gen6 (string)

1 : Gen7 (string)

]

defaultStatus : unknown (string)

}

]

datePublic : 2024-07-18T07:38:00.000Z (string)

references : [ »

0 : { »

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-122 (string)

description : CWE-122 Heap-based Buffer Overflow (string)

}

]

}

]

providerMetadata : { »

orgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

shortName : sonicwall (string)

dateUpdated : 2024-07-18T07:42:37.995Z (string)

}

cveMetadata : { »

cveId : CVE-2024-40764 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-02T04:39:54.567Z (string)

dateReserved : 2024-07-10T15:58:49.461Z (string)

assignerOrgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

datePublished : 2024-07-18T07:42:37.995Z (string)

assignerShortName : sonicwall (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "matchCriteriaId": "8842B1FC-9CC4-4DB8-8119-B435CD33A5D1", "versionEndExcluding": "6.5.4.v-21s-rc2457", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F5B29EE-9D04-44CC-BB1F-C3C6130D2708", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "93914C8C-69ED-480C-80F2-4334C00788D8", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE26ECE3-9E17-456F-A416-E23A758C9E4C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:*", "matchCriteriaId": "67EEA85D-8F9E-4E41-B8B3-119738375A84", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0D33997-0D65-464E-8AA5-043499C667D1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:*", "matchCriteriaId": "D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA838CC7-083A-4BF1-9C95-BED6F5A2992C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0171D69-14A6-4AB0-8377-C233F5E192D8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE881F9C-CE9E-4D1B-92BA-D28B2B16178A", "versionEndExcluding": "7.0.1-5161", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "matchCriteriaId": "797C9FA3-70EF-492A-ACA3-CE21422D5AAA", "versionEndExcluding": "7.1.1-7058", "versionStartIncluding": "7.1.1-7040", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*", "matchCriteriaId": "A69E000B-5806-46FD-A233-4E2CC9DD38D2", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C15FED5-C48C-47CF-9645-0563D77883C1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*", "matchCriteriaId": "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*", "matchCriteriaId": "6739DEA3-06FF-4FEB-9931-0DB27F63B70E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*", "matchCriteriaId": "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D6CF3CF-256C-4C04-8BDF-B16398CD0459", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*", "matchCriteriaId": "F2ABC8D8-2943-4073-9568-E87961A18998", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*", "matchCriteriaId": "9F57D527-AA3F-45E9-9BCE-6F76691066B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5ECCCF0-A5D8-42A8-8EC1-D12B49B1124A", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*", "matchCriteriaId": "70340DD4-687B-402C-85AF-C2B80D0F1600", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*", "matchCriteriaId": "52847BA2-470B-4078-A79B-52095DB9214B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*", "matchCriteriaId": "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DBDD10C-F89D-4051-BC70-67B41167FF9B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C23940E-2F9D-447B-A740-42035ED5D400", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*", "matchCriteriaId": "90C790AD-C40E-4527-8F83-D278282A9600", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*", "matchCriteriaId": "352DFCF9-E333-41C0-8033-91265768FD8E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C882C38-9DA5-4C03-BB23-AB2B448E3307", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de b\u00fafer basada en mont\u00f3n en SonicOS IPSec VPN permite que un atacante remoto no autenticado provoque una denegaci\u00f3n de servicio (DoS)."}], "id": "CVE-2024-40764", "lastModified": "2024-11-21T09:31:34.703", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-07-18T08:15:02.340", "references": [{"source": "PSIRT@sonicwall.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012"}], "sourceIdentifier": "PSIRT@sonicwall.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "PSIRT@sonicwall.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8842B1FC-9CC4-4DB8-8119-B435CD33A5D1 (string)

versionEndExcluding : 6.5.4.v-21s-rc2457 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:nsv10:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8F5B29EE-9D04-44CC-BB1F-C3C6130D2708 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:sonicwall:nsv100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DB6153BB-7B2C-4307-ABE0-0E7E1745DEC7 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:sonicwall:nsv1600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 93914C8C-69ED-480C-80F2-4334C00788D8 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:sonicwall:nsv200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FE26ECE3-9E17-456F-A416-E23A758C9E4C (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:sonicwall:nsv25:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 67EEA85D-8F9E-4E41-B8B3-119738375A84 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:sonicwall:nsv300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F0D33997-0D65-464E-8AA5-043499C667D1 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:sonicwall:nsv400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D13CD6CF-B048-4214-AAA8-AB58BE6C6C5E (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:sonicwall:nsv50:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BA838CC7-083A-4BF1-9C95-BED6F5A2992C (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:sonicwall:nsv800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D0171D69-14A6-4AB0-8377-C233F5E192D8 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BE881F9C-CE9E-4D1B-92BA-D28B2B16178A (string)

versionEndExcluding : 7.0.1-5161 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 797C9FA3-70EF-492A-ACA3-CE21422D5AAA (string)

versionEndExcluding : 7.1.1-7058 (string)

versionStartIncluding : 7.1.1-7040 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D8B0C7A-FD65-47CA-A625-150A90EFA7A1 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A69E000B-5806-46FD-A233-4E2CC9DD38D2 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C15FED5-C48C-47CF-9645-0563D77883C1 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A884B1BB-F201-4C77-9F6E-B8A884DCD4C2 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C3BA5A3-1160-4793-A8D6-40B9D264BCC4 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6739DEA3-06FF-4FEB-9931-0DB27F63B70E (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0250EDF9-0AEF-4711-8EF6-D447CF48BCAF (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7D6CF3CF-256C-4C04-8BDF-B16398CD0459 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F2ABC8D8-2943-4073-9568-E87961A18998 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9F57D527-AA3F-45E9-9BCE-6F76691066B5 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F5ECCCF0-A5D8-42A8-8EC1-D12B49B1124A (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 70340DD4-687B-402C-85AF-C2B80D0F1600 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52847BA2-470B-4078-A79B-52095DB9214B (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9853AE3A-B0EA-4249-AA7D-1F2051C9BF91 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4DBDD10C-F89D-4051-BC70-67B41167FF9B (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C23940E-2F9D-447B-A740-42035ED5D400 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 90C790AD-C40E-4527-8F83-D278282A9600 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 352DFCF9-E333-41C0-8033-91265768FD8E (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C882C38-9DA5-4C03-BB23-AB2B448E3307 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de desbordamiento de búfer basada en montón en SonicOS IPSec VPN permite que un atacante remoto no autenticado provoque una denegación de servicio (DoS). (string)

}

]

id : CVE-2024-40764 (string)

lastModified : 2024-11-21T09:31:34.703 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-07-18T08:15:02.340 (string)

references : [ »

0 : { »

source : PSIRT@sonicwall.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012 (string)

}

]

sourceIdentifier : PSIRT@sonicwall.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-122 (string)

}

]

source : PSIRT@sonicwall.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object