[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7-IpCdeaSC77Z-dFsCuKKUEymf43sHIEfTef5syCs6A":3,"g5a-family:sonicwall\u002Ftz370":105,"g5a-ex:sonicwall\u002Ftz370@*":109},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"sonicwall","tz370",0,28,2,"2025-07-29",[],"Tz370 by Sonicwall is a technology product and 28 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,31,38,43,50,56,59,64,69],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2024-53704","An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.","2025-01-09",9.8,"v3.1","Critical",0.95314,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":29,"epssScore":30},"CVE-2022-22274","A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.","2022-03-25",false,0.75521,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":37},"CVE-2023-0656","A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.","2023-03-02",7.5,"High",0.41319,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":42},"CVE-2024-40766","An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.","2024-08-23",0.18379,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":22,"severity":48,"isKev":29,"epssScore":49},"CVE-2021-20031","A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.","2021-10-12",6.1,"Medium",0.13041,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":55},"CVE-2021-20046","A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.","2022-01-10",8.8,0.01939,{"cveId":57,"description":58,"publishedDate":53,"cvssScore":54,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":55},"CVE-2021-20048","A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.",{"cveId":60,"description":61,"publishedDate":62,"cvssScore":35,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":63},"CVE-2021-20027","A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.","2021-06-14",0.01291,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":35,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":68},"CVE-2022-22275","Improper Restriction of TCP Communication Channel in HTTP\u002FS inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable.","2022-04-27",0.01094,{"cveId":70,"description":71,"publishedDate":67,"cvssScore":35,"cvssVersion":22,"severity":36,"isKev":29,"epssScore":72},"CVE-2022-22278","A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack",0.00956,[74,79],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","2025-02-18","SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":39,"description":40,"publishedDate":41,"cvssScore":21,"severity":23,"isKev":4,"epssScore":42,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":78},"SonicWall SonicOS Improper Access Control Vulnerability","2024-09-09","SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Tz370 by Sonicwall - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tz370 by Sonicwall with 28 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tz370 vulnerabilities, Tz370 security, Tz370 CVE, Sonicwall Tz370, Tz370 threat intelligence, Sonicwall security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Tz370 KEV, Tz370 exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Tz370","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsonicwall\u002Ftz370",{"@type":93,"name":94,"url":95},"Organization","Sonicwall","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsonicwall","Security Software","Multiple versions",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tz370 Security Vulnerabilities","Security vulnerabilities affecting Tz370 by Sonicwall",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T12:25:12.499Z","3.0",[106],{"product":107,"cves":108},"tz370_firmware",4,{"rows":110,"total":11,"capped":29,"failed":11},[111,114],{"cveId":18,"name":75,"severity":23,"cvss":21,"added":76,"epss":24,"published":20,"ranges":112,"hits":113,"checked":29,"covers":29},[],[],{"cveId":39,"name":80,"severity":23,"cvss":21,"added":81,"epss":42,"published":41,"ranges":115,"hits":116,"checked":29,"covers":29},[],[]]