CVE-2024-40764: Buffer Overflow
Published Jul 18, 2024
·Updated
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).
Affected Software
34 affected components
All of the following
SonicWall SonicOS<6.5.4.v-21s-rc2457
Any of the following
SonicWall Nsv10
SonicWall Nsv100
SonicWall Nsv1600
SonicWall Nsv200
SonicWall Nsv25
SonicWall Nsv300
SonicWall Nsv400
SonicWall Nsv50
SonicWall Nsv800
All of the following
Any of the following
SonicWall SonicOS<7.0.1-5161
SonicWall SonicOS>=7.1.1-7040<7.1.1-7058
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv 270
SonicWall Nsv 470
SonicWall Nsv 870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
Event History
Jul 18, 2024
CVE Published
via MITRE·07:42 AM
Data Sourced
via MITRE·07:42 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-40764?
CVE-2024-40764 is considered a critical remote code execution vulnerability that can lead to Denial of Service.
2
How do I fix CVE-2024-40764?
To mitigate CVE-2024-40764, upgrade SonicWall SonicOS to version 6.5.4.v-21s-rc2458 or later.
3
Which SonicWall products are affected by CVE-2024-40764?
CVE-2024-40764 affects SonicWall SonicOS versions up to 6.5.4.v-21s-rc2457 and versions in a specific range up to 7.1.1-7058.
4
Can CVE-2024-40764 be exploited remotely?
Yes, CVE-2024-40764 can be exploited by unauthenticated attackers to cause Denial of Service.
5
Is my SonicWall device vulnerable to CVE-2024-40764?
Only SonicWall devices running the affected versions of SonicOS are vulnerable to CVE-2024-40764.