Sonicos

Vendor:

First CVE: Apr 29, 2015 · Active for 11 years

69
Total CVEs
More Total CVEs than 99% of tracked products
6.9
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
4.3%
KEV Rate
Higher KEV Rate than 98% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Sonicos over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 29, 2015
11 years ago
Most Recent CVE
Apr 29, 2026
89 days ago

CVE Severity & Scoring

Sonicos69 CVEs
All CVEs352,785 CVEs
MediumHighCritical
Attack Vector
Local2 (2.9%)
Network63 (91.3%)
Unknown1 (1.4%)
Physical0 (0.0%)
Adjacent Network3 (4.3%)
Attack Complexity
Low64 (92.8%)
High4 (5.8%)
Unknown1 (1.4%)
User Interaction
None62 (89.9%)
Unknown1 (1.4%)
Required6 (8.7%)
Privileges Required
Low19 (27.5%)
High7 (10.1%)
None42 (60.9%)
Unknown1 (1.4%)

Top CVEs

Signals from CVEs in this product scope (69 CVEs).

69 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Jan 9, 20259.898YESYES
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
Aug 9, 20199.881NOYES
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditi
Aug 23, 20249.880YESNO
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the fi
Oct 12, 20209.880YESNO
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdh
Aug 9, 20198.874NONO
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code
Mar 25, 20229.863NONO
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms
Mar 25, 20215.957NONO
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
Aug 9, 20197.548NOYES
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3
Aug 9, 20195.348NONO
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
Oct 12, 20216.146NOYES

Exploit Exposure

Signals from CVEs in this product scope (69 CVEs).

CISA KEV
3 CVEs
4.3% of CVEs· 98th percentile
Metasploit
1 CVE
1.4% of CVEs· 97th percentile
Nuclei
2 CVEs
2.9% of CVEs· 97th percentile
ExploitDB
2 CVEs
2.9% of CVEs· 85th percentile

Social Chatter

Signals from CVEs in this product scope (69 CVEs).

Media Mentions

Signals from CVEs in this product scope (69 CVEs).

Top CNAs Publishing CVEs For Sonicos

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
8.0.0-803519.895.1%11
7.5.0.1214.32.4%00
7.1.2-701919.895.1%11
7.1.1-704019.80.8%00
7.0.1.015.962.9%00
7.0.0.0117.13.6%10
6.5.4.7-83n17.51.4%00
6.5.4.6-79n15.30.9%00
6.5.3.3-3n17.20.9%00
6.5.3.147.30.9%00
6.5.2.3-4n17.20.9%00
6.5.2.247.30.9%00
6.5.2.015.42.5%00
6.5.1.9-4n17.20.9%00
6.5.1.847.30.9%00
6.5.1.4-4n17.20.9%00
6.5.1.347.30.9%00
6.5.1.12-3n17.51.4%00
6.5.1.015.42.5%00
6.5.0.015.42.5%00