CVE-2024-12802
First published: Thu Jan 09 2025(Updated: )
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.
Credit: PSIRT@sonicwall.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SonicWall SSL VPN | ||
| Microsoft Active Directory |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-12802?
CVE-2024-12802 is rated as a high-severity vulnerability due to the potential for unauthorized access through MFA bypass.
How can I fix CVE-2024-12802?
To fix CVE-2024-12802, ensure that your SonicWALL SSL-VPN is updated to the latest firmware that addresses this vulnerability.
Which systems are affected by CVE-2024-12802?
CVE-2024-12802 affects SonicWALL SSL-VPN when integrated with Microsoft Active Directory.
What exploit scenario is associated with CVE-2024-12802?
CVE-2024-12802 allows attackers to bypass multi-factor authentication by exploiting differences in handling UPN and SAM account names.
Is CVE-2024-12802 being actively exploited?
While there is no direct evidence of active exploitation for CVE-2024-12802, it remains a significant risk and should be mitigated promptly.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sonicwall
- canonical/sonicwall ssl vpn
- vendor/microsoft
- canonical/microsoft active directory