CVE-2024-12805 Details
Description
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.
A post-authentication format string vulnerability has been identified in the management interface of SonicWall SonicOS. This vulnerability allows remote attackers to cause a crash of the firewall and potentially execute arbitrary code. It affects multiple generations of SonicWall firewalls and certain versions of the SonicWall NSv product.
Users are advised to upgrade to SonicWall SonicOS versions 6.5.5.1-6n, 7.0.1-5165 and higher, 7.1.3-7015 and higher, or 8.0.0-8037 and higher, depending on their specific firewall model.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jan 9, 2025CISA-ADP
Assessed Jan 9, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004 | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-134 | Use of Externally-Controlled Format String | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SonicWall Gen6 Hardware Firewalls | All versions |
CPE
Remediation
| |
| SonicWall TZ 300 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 300W | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 400 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 400W | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 500 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 500W | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ 600 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 2650 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 3600 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 3650 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 4600 | All versions |
CPE
Remediation
| |
| SonicWall NSA 4650 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 5600 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 5650 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 6600 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSA 6650 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall SM 9200 | All versions |
CPE
Remediation
| |
| SonicWall SM 9250 | All versions |
CPE
Remediation
| |
| SonicWall SM 9400 | All versions |
CPE
Remediation
| |
| SonicWall SM 9450 | All versions |
CPE
Remediation
| |
| SonicWall SM 9600 | All versions |
CPE
Remediation
| |
| SonicWall SM 9650 | All versions |
CPE
Remediation
| |
| SonicWall TZ 300P | All versions |
CPE
Remediation
| |
| SonicWall TZ 600P | All versions |
CPE
Remediation
| |
| SonicWall SOHO 250 | All versions |
CPE
Remediation
| |
| SonicWall SOHO 250W | All versions |
CPE
Remediation
| |
| SonicWall TZ 350 | All versions |
CPE
Remediation
| |
| SonicWall TZ 350W | All versions |
CPE
Remediation
| |
| SonicWall Gen7 NSv | All versions |
CPE
Remediation
| |
| SonicWall NSv 270 | All versions |
CPE
Remediation
| |
| SonicWall NSv 470 | All versions |
CPE
Remediation
| |
| SonicWall NSv 870 | All versions |
CPE
Remediation
| |
| SonicWall Gen7 Firewalls | All versions |
CPE
Remediation
| |
| SonicWall TZ270 | All versions |
CPE
Remediation
| |
| SonicWall TZ270W | All versions |
CPE
Remediation
| |
| SonicWall TZ370 | All versions |
CPE
Remediation
| |
| SonicWall TZ370W | All versions |
CPE
Remediation
| |
| SonicWall TZ470 | All versions |
CPE
Remediation
| |
| SonicWall TZ470W | All versions |
CPE
Remediation
| |
| SonicWall TZ570 | All versions |
CPE
Remediation
| |
| SonicWall TZ570W | All versions |
CPE
Remediation
| |
| SonicWall TZ570P | All versions |
CPE
Remediation
| |
| SonicWall TZ670 | All versions |
CPE
Remediation
| |
| SonicWall NSa 2700 | All versions |
CPE
Remediation
| |
| SonicWall NSa 3700 | All versions |
CPE
Remediation
| |
| SonicWall NSa 4700 | All versions |
CPE
Remediation
| |
| SonicWall NSa 5700 | All versions |
CPE
Remediation
| |
| SonicWall NSa 6700 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSsp 10700 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSsp 11700 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSsp 13700 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall NSsp 15700 | <= 6.5.4.15-117n |
CPE
Remediation
| |
| SonicWall TZ80 | 8.0.0-8035 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 17, 2025 | CVE Modified | CISA-ADP |
| Jan 9, 2025 | CVE Modified | CISA-ADP |
| Jan 9, 2025 | New CVE Received | [email protected] |
Volerion