SonicOS: improper access control (CVE-2024-40766) #shorts #breaking

CVE

This recent security vulnerability, identified as improper access control, affects the management access of SonicWall SonicOS devices. Specifically, it impacts SonicWall Firewall devices from Generation 5, Generation 6, and Generation 7, including those running SonicOS version 7.0.1-5035 and earlier. The vulnerability could allow unauthorized users to gain access to restricted resources and potentially cause the firewall to crash. As the exploitability of this vulnerability was discovered less than a month ago and remains a zero-day issue, it poses a significant risk to systems that have not been addressed. Organizations using these affected devices should have a heightened awareness of this security flaw.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015