← Database

CVE-2024-40765

CRITICAL CVSS: 9.8 Published: 2025-01-09 Modified: 2026-06-17

Description

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

Affected Platforms

Unknown

Weakness Type

CWE-190

References