A stack‑based buffer overflow exists in the SonicOS TACACS+ authentication client that can be triggered before any user authentication is performed. When the vulnerable input is processed, the application can be forced to crash, resulting in a denial of service at the application layer. The weakness is classified as CWE‑121, indicating that improper handling of stack variables allows the overflow.

The vulnerability affects SonicWall devices running the SonicOS operating system that include the TACACS+ client component. No specific firmware or product version information is provided in the available data, so all SonicOS installations that use TACACS+ are potentially exposed until a patch is applied.

The exploit appears to be remote and unauthenticated, requiring only network access to the TACACS+ service. While the EPSS score is not available and the CVE is not listed in CISA’s KEV catalog, the CVSS score of 5.9 indicates a medium‑severity risk. An attacker who successfully triggers the overflow can force the authentication service to terminate, effectively denying legitimate users from authenticating to the system. The likelihood of exploitation depends on how exposed the TACACS+ service is to untrusted traffic.