CVE-2024-40763

Published: Dec 5, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.

Affected (5)

Products: Sonicwall: Sma 200 Firmware, Sma 210 Firmware, Sma 400 Firmware, Sma 410 Firmware, Sma 500v Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 200 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 210 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 210	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 400 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 400	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 410 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 410	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 500v Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 500v	All versions

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018

Source: PSIRT@sonicwall.com

Vendor Advisory

Timeline

No history available yet.