CVE-2024-40765 - An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload

Back Back to CVE browser

CRITICAL

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload

Published Jan 9, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.80%

Description

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

Affected products

Vendor SonicWall Product SonicOS Default
unknown
Affected
- 6.5.4.4-44v-21-2395 and older versions
- 7.0.1-5151 and older versions
- 7.1.1-7051 and older versions