CVE-2024-12803
Published: 09 January 2025
Summary
CVE-2024-12803 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Sonicwall (inferred from references). Its CVSS base score is 7.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2024-12803 is a post-authentication stack-based buffer overflow vulnerability (CWE-121) in the SonicOS management interface of SonicWall firewalls. It affects the SonicOS component, enabling a remote attacker with authenticated access to trigger the overflow, which can crash the firewall and potentially lead to arbitrary code execution.
The vulnerability has a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating network accessibility with low attack complexity but requiring high privileges (PR:H), such as administrative credentials. An authenticated attacker can exploit it remotely without user interaction to achieve high impacts on confidentiality, integrity, and availability, including denial of service via firewall crashes and potential remote code execution on the affected device.
SonicWall has published a detailed advisory on the vulnerability under identifier SNWLID-2025-0004, available at https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-51117
Vulnerability details
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Post-auth RCE via buffer overflow in remotely accessible management interface directly enables exploitation of public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the buffer overflow vulnerability by requiring timely application of vendor patches as published in SonicWall advisory SNWLID-2025-0004.
Prevents stack-based buffer overflows like CWE-121 by enforcing bounds checking and validation of inputs to the SonicOS management interface.
Mitigates exploitation of the stack-based buffer overflow through memory protections such as stack canaries, ASLR, and non-executable stack segments.