A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 NSv to version 7.0.1.0-5051-1511 or laterUpdate SonicWall SonicOS Gen7 TZ to version 7.0.1-5051-R2624 or laterUpdate SonicWall SonicOS Gen7 NSsp to version 7.0.1.0-5051-R843 or laterUpdate SonicWall SonicOS Gen7 NSa to version 7.0.1-5051-R2624 or later | May 25, 2026 | Apr 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub