Sign inStart freeBook a demo

Nsa 6600 vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited0 versions
The short answer

Nsa 6600 is made by SonicWall. We track 13 published vulnerabilities in it, across 0 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 9 September 2024. If you run Nsa 6600, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Nsa 6600 flaw added to the known-exploited list is CVE-2024-40766, on 9 September 2024. We keep watching the known-exploited list.

Versions

Which versions of Nsa 6600 do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which Nsa 6600 vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 9.8
    CVE-2024-40766CriticalKnown exploited
    SonicWall SonicOS Improper Access Control Vulnerability

    SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

    Chance of use18%Known exploited since9 Sep 2024
Exploit likelihood

Which Nsa 6600 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 2.5%
    CVE-2018-5281Medium

    SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens.

    CVSS5.4Published8 Jan 2018
  2. 2.5%
    CVE-2018-5280Medium

    SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.

    CVSS5.4Published8 Jan 2018
  3. 0.8%
    CVE-2023-39278Medium

    SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
  4. 0.8%
    CVE-2023-39279Medium

    SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
  5. 0.8%
    CVE-2023-39280Medium

    SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
  6. 0.8%
    CVE-2023-41712Medium

    SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
  7. 0.8%
    CVE-2023-41711Medium

    SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash.

    CVSS6.5Published17 Oct 2023
  8. 0.8%
    CVE-2023-39276Medium

    SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
  9. 0.8%
    CVE-2023-39277Medium

    SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.

    CVSS6.5Published17 Oct 2023
Precursor Intelligence

Running Nsa 6600? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 13 published vulnerabilities listed under the name Nsa 6600, across 0 versions. The most recent Nsa 6600 flaw added to the known-exploited list is CVE-2024-40766, on 9 September 2024.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2024-40766.

Create a Precursor Intelligence account and track Nsa 6600. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring