CVE-2024-12805

Published: Jan 9, 2025

Modified: Jan 17, 2025

PUBLISHED

Description

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.

Vendor	Product	Versions
SonicWall	SonicOS	affected `6.5.4.15-117n and older versions` affected `7.0.1-5161 and older version` affected `7.1.2-7019` affected `8.0.0-8035`

Weaknesses (CWE)

CWE-134

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-12805

Description

Affected Products

Weaknesses (CWE)

References