SonicWall SSL VPN vulnerabilities

3 CVEs affecting SonicWall SSL VPN, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2631, published 2009-12-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-5603, published 2007-11-05. High severity, CVSS 9.3. EPSS: 38% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long…
CVE-2007-5814, published 2007-11-05. High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days. Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1)…
CVE-2009-2631, published 2009-12-04. Medium severity, CVSS 6.8. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper…