CVE-2024-29012: SonicWall SonicOS

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function.

Affected products

• SonicWall SonicOS: before 7.0.1-5161 (fixed in 7.0.1-5161); from 7.1.1, before 7.1.1-7058 (fixed in 7.1.1-7058); from 7.1.2, before 7.1.2-7019 (fixed in 7.1.2-7019)

Published 2024-06-20. Last modified 2026-06-17.