high8.8
CVE-2021-20048
A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potenti…
Impact
A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sonicos | through 7.0.1-r1456 through 7.0.1-5023-1349 through 7.0.1-5018-r1715 through 6.5.4.8 through 6.5.1.13-1n through 6.0.5.3-94o |