CVE-2003-1320
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2)…
Does this matter?
Lower severity and a low EPSS score (2.00%). Track it; it rarely justifies an emergency change on its own.
Description
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 2.00% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- sonicwall/firmware
- Source
- cve@mitre.org
References
- http://www.kb.cert.org/vuls/id/287771US Government Resource
- http://www.kb.cert.org/vuls/id/AAMN-5L74VD
- http://www.kb.cert.org/vuls/id/287771US Government Resource
- http://www.kb.cert.org/vuls/id/AAMN-5L74VD
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.