A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 TZ/NSa to version 7.0.1-R1456 or laterUpdate SonicWall SonicOS Gen6 NSsp12K/SM9800 to version 6.5.1.13-1n or laterUpdate SonicWall SonicOS Gen7 NSsp to version 7.0.1-5018-R1715 or laterUpdate SonicWall SonicOS Gen6 to version 6.5.4.8-89n or laterUpdate SonicWall SonicOS Gen7 NSv to version 7.0.1-5023-1349 or laterUpdate SonicWall SonicOS Gen5 SOHO to the latest versionUpdate SonicWall SonicOS Gen5 TZ to the latest versionUpdate SonicWall SonicOS Gen6 NSv to version 6.5.4.v_21s-1288 or later | May 25, 2026 | Oct 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub