First published: Tue Oct 17 2023(Updated: )
SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.
Credit: PSIRT@sonicwall.com
Affected Software | Affected Version | How to fix |
---|---|---|
SonicWall SonicOS | <7.0.1-5145 | |
SonicWall NSA 2700 | ||
SonicWall NSA 3700 Firmware | ||
SonicWall NSA 4700 | ||
SonicWall NSA 5700 | ||
SonicWall NSA 6700 Firmware | ||
SonicWall NSSP 10700 Firmware | ||
SonicWall NSSP 11700 | ||
SonicWall NSSP 13700 | ||
SonicWall NSSP 15700 | ||
SonicWall NSV 10 Firmware | ||
SonicWall NSV 100 Firmware | ||
SonicWall NSV 1600 Firmware | ||
SonicWall NSv 200 | ||
SonicWall NSv 25 | ||
SonicWall NSV 270 | ||
SonicWall NSV 300 | ||
SonicWall NSV 400 | ||
SonicWall NSV 470 | ||
SonicWall NSV 50 Firmware | ||
SonicWall NSV 800 | ||
SonicWall NSv 870 | ||
SonicWall TZ270 | ||
SonicWall TZ270W Firmware | ||
SonicWall TZ370 | ||
SonicWall TZ370W Firmware | ||
SonicWall TZ470 Firmware | ||
SonicWall TZ470W Firmware | ||
SonicWall TZ570 Firmware | ||
SonicWall TZ570P Firmware | ||
SonicWall TZ570W Firmware | ||
SonicWall TZ670 Firmware | ||
SonicWall SonicOS | <6.5.4.4-44v-21-2340 | |
SonicWall SonicOS | <6.5.4.13-105n | |
SonicWall NSA 2600 | ||
SonicWall NSA 2650 | ||
SonicWall NSA 3600 | ||
SonicWall NSA 3650 Firmware | ||
SonicWall NSA 4600 | ||
SonicWall NSA 4650 Firmware | ||
SonicWall NSA 5600 | ||
SonicWall NSA 5650 | ||
SonicWall NSA 6600 | ||
SonicWall NSA 6650 | ||
SonicWall SM9200 | ||
SonicWall SM 9250 | ||
SonicWall SuperMassive 9400 | ||
SonicWall SM 9450 | ||
SonicWall SM 9600 | ||
SonicWall SM 9650 | ||
SonicWall SOHO 250W | ||
SonicWall SOHO 250W Firmware | ||
SonicWall SOHO | ||
SonicWall TZ300 Firmware | ||
SonicWall TZ300P Firmware | ||
SonicWall TZ300W Firmware | ||
SonicWall TZ350 Firmware | ||
SonicWall TZ400W Firmware | ||
SonicWall TZ400W Firmware | ||
SonicWall TZ500W | ||
SonicWall TZ500W | ||
SonicWall TZ600 Firmware | ||
SonicWall TZ600P |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-39276 is medium with a severity value of 6.5.
The SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint can be exploited by an attacker to overflow the stack and cause a firewall crash.
SonicOS versions up to but excluding 7.0.1-5145 are affected by CVE-2023-39276.
No, the Sonicwall Nsa2700 is not vulnerable to CVE-2023-39276.
More information about CVE-2023-39276 can be found at the Sonicwall vulnerability detail page: [link](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012)