CVE-2024-45318 - Vulnerability Details - OpenCVE

A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00614.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Sonicwall	Sma100 Firmware

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018

History

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00333}`	epss `{'score': 0.00477}`

Thu, 05 Dec 2024 17:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Sonicwall Sonicwall sma100 Firmware
CPEs		cpe:2.3:o:sonicwall:sma100_firmware::::::::
Vendors & Products		Sonicwall Sonicwall sma100 Firmware
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 05 Dec 2024 14:00:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.
Weaknesses		CWE-121
References		https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018

MITRE

Status: PUBLISHED

Assigner: sonicwall

Published: 2024-12-05T13:43:31.716Z

Updated: 2024-12-09T14:21:22.642Z

Reserved: 2024-08-26T20:20:45.693Z

Link: CVE-2024-45318

Vulnrichment

Updated: 2024-12-05T16:53:46.642Z

NVD

Status : Awaiting Analysis

Published: 2024-12-05T14:15:21.000

Modified: 2024-12-05T17:15:11.880

Link: CVE-2024-45318

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-45318", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2024-08-26T20:20:45.693Z", "datePublished": "2024-12-05T13:43:31.716Z", "dateUpdated": "2024-12-09T14:21:22.642Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux"], "product": "SMA100", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "10.2.1.13-72sv and earlier versions"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Alain Mowat of Orange Cyberdefense, Switzerland."}], "datePublic": "2024-12-05T01:22:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.</span>\n\n</span>"}], "value": "A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2024-12-05T13:43:31.716Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018"}], "source": {"advisory": "SNWLID-2024-0018", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "sonicwall", "product": "sma100_firmware", "cpes": ["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "10.2.1.13-72sv", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-12-07T04:55:30.666847Z", "id": "CVE-2024-45318", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-09T14:21:22.642Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-45318", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-07T04:55:30.666847Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"], "vendor": "sonicwall", "product": "sma100_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "10.2.1.13-72sv"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T16:53:46.642Z"}}], "cna": {"source": {"advisory": "SNWLID-2024-0018", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Alain Mowat of Orange Cyberdefense, Switzerland."}], "affected": [{"vendor": "SonicWall", "product": "SMA100", "versions": [{"status": "affected", "version": "10.2.1.13-72sv and earlier versions"}], "platforms": ["Linux"], "defaultStatus": "unknown"}], "datePublic": "2024-12-05T01:22:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.</span>\n\n</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2024-12-05T13:43:31.716Z"}}}, "cveMetadata": {"cveId": "CVE-2024-45318", "state": "PUBLISHED", "dateUpdated": "2024-12-09T14:21:22.642Z", "dateReserved": "2024-08-26T20:20:45.693Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2024-12-05T13:43:31.716Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.1"}