CloudMap 漏洞情报库

严重CVE-2024-384752024/06/17

Sonicwall - Pre-Authentication Arbitrary File Read

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected. Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.

SonicWALLPoC 已收录RCE

CVSS9.1EPSS 93.5%

严重CVE-2021-442282021/12/10

Sonicwall NSM - Remote Code Execution (Apache Log4j)

Sonicwall NSM is susceptible to Log4j JNDI remote code execution. SonicWall Network Security Manager (NSM) allows you to centrally orchestrate all firewall operations error-free, see and manage threats and risks across your firewall ecosystem from one place, and stay connected and compliant.

SonicWALLPoC 已收录EXP 已收录RCE

CVSS10.0EPSS 94.4%

中危CVE-2021-200312021/10/13

SonicWall SonicOS 7.0 - Open Redirect

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations. and/or possibly redirect a user to a malicious site.

SonicWALL nsa_2650PoC 已收录

CVSS6.1EPSS 41.3%

SonicWALL

关联漏洞

Sonicwall - Pre-Authentication Arbitrary File Read

Sonicwall NSM - Remote Code Execution (Apache Log4j)

SonicWall SonicOS 7.0 - Open Redirect