SonicWall Security Updates – 05 December 2024

The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform stack-based and heap-based buffer overflow, or execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1- SonicWall SMA100 SSLVPN Web Management Stack-Based Buffer Overflow Vulnerability (CVE-2024-45318):

• CVSS: 8.1
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2- SonicWall SMA100 SSLVPN Web Management Certificate-Based Authentication Bypass Vulnerability (CVE-2024-45319):

• CVSS: 6.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Bypass Security