{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"NSv (200, 400, 800, 1600) sur Azure versions ant\u00e9rieures \u00e0 6.5.4.4-44v-21-2340","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"NSv (10, 25, 50, 100, 200, 300, 400, 800, 1600) sur Hyper-V versions ant\u00e9rieures \u00e0 6.5.4.4-44v-21-2340","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen7 NSSP15700 versions ant\u00e9rieures \u00e0 7.0.1-5145 (R5175)","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"NSv (10, 25, 50, 100, 200, 300, 400, 800, 1600) sur KVM versions ant\u00e9rieures \u00e0 6.5.4.4-44v-21-2340","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen6 Firewalls SOHOW, TZ 300, TZ 300W, TZ 400, TZ 400W, TZ 500, TZ 500W, TZ 600, NSA 2600, NSA 2650, NSA 3600, NSA 3650, NSA 4600, NSA 4650, NSA 5600, NSA 5650, NSA 6600, NSA 6650, SM 9200, SM 9250, SM 9400, SM 9450, SM 9600, SM 9650, TZ 300P, TZ 600P, SOHO 250, SOHO 250W, TZ 350 et TZ 350W versions ant\u00e9rieures \u00e0 6.5.4.13-105n","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen7 NSv (KVM) versions ant\u00e9rieures \u00e0 7.0.1-5145 (R5175)","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen7 NSA4700, NSA5700, NSA6700, NSSP10700, NSSP11700 et NSSP13700 versions ant\u00e9rieures \u00e0 7.0.1-5145 (R5175)","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen7 NSv (VMWARE, AWS, AWS-PAYG, AZURE, HYPER-V) versions ant\u00e9rieures \u00e0 7.0.1-5145 (R5175)","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen7 TZ270, TZ270W, TZ370, TZ370W, TZ470, TZ470W, TZ570, TZ570W, TZ570P, TZ670, NSA2700 et NSA3700 versions ant\u00e9rieures \u00e0 7.0.1-5145 (R5175)","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"Gen6 SonicOSv - NSv (10, 25, 50, 100, 200, 300, 400, 800, 1600) sur VMWare versions ant\u00e9rieures \u00e0 6.5.4.4-44v-21-2340","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}},{"description":"NSv (200, 400, 800, 1600) sur AWS NSv (200, 400, 800, 1600) sur AWS-PAYG versions ant\u00e9rieures \u00e0 6.5.4.4-44v-21-2340","product":{"name":"SonicOS","vendor":{"name":"Sonicwall","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2023-41713","url":"https://www.cve.org/CVERecord?id=CVE-2023-41713"},{"name":"CVE-2023-41711","url":"https://www.cve.org/CVERecord?id=CVE-2023-41711"},{"name":"CVE-2023-39280","url":"https://www.cve.org/CVERecord?id=CVE-2023-39280"},{"name":"CVE-2023-41715","url":"https://www.cve.org/CVERecord?id=CVE-2023-41715"},{"name":"CVE-2023-39278","url":"https://www.cve.org/CVERecord?id=CVE-2023-39278"},{"name":"CVE-2023-39277","url":"https://www.cve.org/CVERecord?id=CVE-2023-39277"},{"name":"CVE-2023-39279","url":"https://www.cve.org/CVERecord?id=CVE-2023-39279"},{"name":"CVE-2023-41712","url":"https://www.cve.org/CVERecord?id=CVE-2023-41712"},{"name":"CVE-2023-39276","url":"https://www.cve.org/CVERecord?id=CVE-2023-39276"}],"links":[],"reference":"CERTFR-2023-AVI-0852","revisions":[{"description":"Version initiale","revision_date":"2023-10-17T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans SonicWall SonicOS.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, un contournement de la politique de s\u00e9curit\u00e9 et une \u00e9l\u00e9vation\nde privil\u00e8ges.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans SonicWall SonicOS","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 SonicWall SNWLID-2023-0012 du 17 octobre 2023","url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012"}]}