CVE-2024-53703

HIGH

Sonicwall Sma 200 Firmware < 10.2.1.14-75sv - Stack Buffer Overflow

Title source: rule

Description

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.

Exploits (1)

nomisec WORKING POC 2 stars

by scrt · poc

https://github.com/scrt/cve-2024-53703-poc

View Code ZIP pw:eip

References (1)

[Vendor Advisory] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018

Scores

CVSS v3 8.1

EPSS 0.2915

EPSS Percentile 96.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-121

Status published

Products (5)

sonicwall/sma_200_firmware < 10.2.1.14-75sv

sonicwall/sma_210_firmware < 10.2.1.14-75sv

sonicwall/sma_400_firmware < 10.2.1.14-75sv

sonicwall/sma_410_firmware < 10.2.1.14-75sv

sonicwall/sma_500v_firmware < 10.2.1.14-75sv

Published Dec 05, 2024

Tracked Since Feb 18, 2026