A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 TZ to the latest versionUpdate SonicWall SonicOS Gen6 NSv Virtual to version 6.5.4.4-44V-21-1452 or laterUpdate SonicWall SonicOS Gen7 NSsp to the latest versionUpdate SonicWall SonicOS Gen7 NSv to the latest versionUpdate SonicWall SonicOS Gen6 NSa/TZ/SOHO W/SuperMassive 92xx/94xx/96xx to version 6.5.4.9-92n or later | May 25, 2026 | Jan 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub