[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs4c24HyvSlFhoL_OzTom-FCzxoHrRuY-x1bVJR8ZDiI":3,"g5a-family:sonicwall\u002Fsoho_250w":98,"g5a-ex:sonicwall\u002Fsoho_250w@*":101},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":70,"seoMetadata":76,"meta":95},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"sonicwall","soho_250w",0,17,1,"2024-08-23",[],"Soho 250w by Sonicwall is a technology product and 17 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,32,39,42,48,53,58,64,67],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2024-40766","An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.",9.8,"v3.1","Critical",0.18379,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":31},"CVE-2021-20031","A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.","2021-10-12",6.1,"Medium",false,0.13041,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":30,"epssScore":38},"CVE-2021-20046","A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.","2022-01-10",8.8,"High",0.01939,{"cveId":40,"description":41,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":30,"epssScore":38},"CVE-2021-20048","A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":30,"epssScore":47},"CVE-2021-20027","A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.","2021-06-14",7.5,0.01291,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":30,"epssScore":52},"CVE-2022-22275","Improper Restriction of TCP Communication Channel in HTTP\u002FS inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable.","2022-04-27",0.01094,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":30,"epssScore":57},"CVE-2022-47522","The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key.","2023-04-15",0.00889,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":63},"CVE-2023-39279","SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash.","2023-10-17",6.5,0.00803,{"cveId":65,"description":66,"publishedDate":61,"cvssScore":62,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":63},"CVE-2023-39276","\nSonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.\n\n\n",{"cveId":68,"description":69,"publishedDate":61,"cvssScore":62,"cvssVersion":21,"severity":29,"isKev":30,"epssScore":63},"CVE-2023-39277","\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash.",[71],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":72,"cisaDateAdded":73,"cisaShortDescription":74,"cisaRequiredAction":75},"SonicWall SonicOS Improper Access Control Vulnerability","2024-09-09","SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":77,"metaDescription":78,"keywords":79,"structuredData":80},"Soho 250w by Sonicwall - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Soho 250w by Sonicwall with 17 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Soho 250w vulnerabilities, Soho 250w security, Soho 250w CVE, Sonicwall Soho 250w, Soho 250w threat intelligence, Sonicwall security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Soho 250w KEV, Soho 250w exploited vulnerabilities",{"@context":81,"@type":82,"name":83,"description":78,"url":84,"manufacturer":85,"applicationCategory":89,"softwareVersion":90,"mainEntity":91},"https:\u002F\u002Fschema.org","SoftwareApplication","Soho 250w","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsonicwall\u002Fsoho_250w",{"@type":86,"name":87,"url":88},"Organization","Sonicwall","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsonicwall","Security Software","Multiple versions",{"@type":92,"name":93,"description":94,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Soho 250w Security Vulnerabilities","Security vulnerabilities affecting Soho 250w by Sonicwall",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":96,"apiVersion":97},"2026-10-18T19:43:21.928Z","3.0",[99],{"product":100,"cves":11},"soho_250w_firmware",{"rows":102,"total":11,"capped":30,"failed":9},[103],{"cveId":18,"name":72,"severity":22,"cvss":20,"added":73,"epss":23,"published":104,"ranges":105,"checked":4,"hits":106,"covers":30},"2024-08-23T07:15:03.643",[],[]]