CVE-2023-0656: Buffer Overflow
Published Mar 2, 2023
·Updated
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
Affected Software
36 affected components
SonicWall next-generation firewall (NGFW)=series 6
SonicWall next-generation firewall (NGFW)=series 7
SonicWall SonicOS<=7.0.1-5111
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nsv 270
SonicWall Nsv 470
SonicWall Nsv 870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
SonicWall SonicOS<=7.0.1-5083
SonicWall Nssp 15700
SonicWall SonicOS<=6.5.4.4-44v-21-1551
SonicWall Nsv 10
SonicWall Nsv 100
SonicWall Nsv 1600
SonicWall Nsv 200
SonicWall Nsv 25
SonicWall Nsv 300
SonicWall Nsv 400
SonicWall Nsv 50
SonicWall Nsv 800
Event History
Mar 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Jan 15, 2024
News Published
via BleepingComputer·06:28 PM
Jan 16, 2024
News Published
via The Register·05:02 PM
Jan 19, 2024
News Published
via BleepingComputer·06:30 PM
Jan 20, 2024
News Published
via The Register·05:06 PM
Frequently Asked Questions
1
What is CVE-2023-0656?
CVE-2023-0656 is a stack-based buffer overflow vulnerability in SonicOS.
2
How can a remote attacker exploit CVE-2023-0656?
A remote unauthenticated attacker can exploit CVE-2023-0656 to cause a Denial of Service (DoS), potentially crashing the affected firewall.
3
Which version of SonicOS is affected by CVE-2023-0656?
SonicOS version 7.0.1-5111 is affected by CVE-2023-0656.
4
What is the severity of CVE-2023-0656?
The severity of CVE-2023-0656 is high, with a CVSS score of 7.5.
5
How can I get more information about CVE-2023-0656?
More information about CVE-2023-0656 can be found at the following reference: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004