NetSight
high7.5

CVE-2024-40763

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy.

Impact

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.

Affected products

VendorProductAffected versions
SonicwallSma 200 Firmware
before 10.2.1.14-75sv
SonicwallSma 210 Firmware
before 10.2.1.14-75sv
SonicwallSma 400 Firmware
before 10.2.1.14-75sv
SonicwallSma 410 Firmware
before 10.2.1.14-75sv
SonicwallSma 500v Firmware
before 10.2.1.14-75sv

Weakness classification

References