CVE-2024-22396

Summary

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

Affected Software

VendorProductVersion RangeStatus
SonicWallSonicOS7.0.1-5145 and earlier versionsaffected
SonicWallSonicOS7.1.1-7047 and earlier versionsaffected
SonicWallSonicOS6.5.4.13-105n and earlier versionsaffected
SonicWallSonicOS6.5.4.4-44v-21-2340 and earlier versionsaffected

Weaknesses

  • CWE-190: CWE-190 Integer Overflow or Wraparound

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References