CVE-2003-1320

CVE-2003-1320 describes a denial-of-service vulnerability, potentially leading to arbitrary code execution, in SonicWALL firmware versions prior to 6.4.0.1. This flaw is triggered by specially crafted Internet Key Exchange (IKE) response packets, which could include an oversized Security Parameter Index (SPI) field, an excessive number of payloads, or an overly long payload. The vulnerability has a CVSS score of 5.1, indicating a medium severity, with a network attack vector and high access complexity, allowing for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation, no known public exploits (Metasploit, Nuclei, ExploitDB), and it's not listed in CISA's KEV catalog, the CVE has garnered significant community discussion with 10 mentions, suggesting ongoing interest.