Files
vuln-nvd/data/2023/CVE-2023-0656.json
T

2 lines
6.9 KiB
JSON

{"affected":[{"affectedData":[{"product":"SonicOS","vendor":"SonicWall","versions":[{"status":"affected","version":"SonicOS NSv 6.5.4.4-44v-21-1551 and earlier"},{"status":"affected","version":"SonicOS NSsp 7.0.1-5083 and earlier"},{"status":"affected","version":"SonicOS 7.0.1-5095 and earlier"}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","matchCriteriaId":"D3048789-B1A5-4C58-9EA8-A0ABF8EE693E","versionEndIncluding":"7.0.1-5111","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","matchCriteriaId":"C61C96E2-0679-4555-A5D6-75E1BE44CB1F","versionEndIncluding":"7.0.1-5083","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","matchCriteriaId":"715F6C7A-0A62-4261-8DD1-17F34AD5F710","versionEndIncluding":"6.5.4.4-44v-21-1551","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B","vulnerable":false},{"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash."}],"id":"CVE-2023-0656","lastModified":"2026-11-09T14:43:41.437","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0656","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-07T17:27:55.650091Z","version":"2.0.3"}}]},"published":"2023-03-02T22:15:09.487","references":[{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"PSIRT@sonicwall.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}