CVE-2024-29013: SonicWall SonicOS

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.

Affected products

• SonicWall SonicOS: before 7.0.1-5161 (fixed in 7.0.1-5161); from 7.1.1, before 7.1.1-7058 (fixed in 7.1.1-7058); from 7.1.2, before 7.1.2-7019 (fixed in 7.1.2-7019)

Published 2024-06-20. Last modified 2026-06-17.