CVE-2024-40765

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - PSIRT@sonicwall.com

Published

2025-01-09

Last modified

2025-01-09

Weaknesses

CWE-190

Affected products

• Sonicos (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013