CVE-2023-39278

Summary

CVE-2023-39278 is a recently disclosed vulnerability affecting SonicOS, the operating system used by various networking devices. The issue involves a post-authentication user assertion failure in the main.cgi component, which triggers a stack-based buffer overflow. Successful exploitation of this vulnerability can lead to a firewall crash, potentially disrupting network services. This issue poses a significant risk to organizations relying on affected devices for their critical infrastructure and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.