CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability
First published: Fri Aug 23 2024(Updated: )
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Credit: PSIRT@sonicwall.com PSIRT@sonicwall.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SonicWall SonicOS | ||
| All of | ||
| SonicWall SonicOS | <5.9.2.14-13o | |
| SonicWALL SOHO | ||
| All of | ||
| SonicWall SonicOS | <6.5.2.8-2n | |
| Any of | ||
| Sonicwall Nssp 12400 | ||
| Sonicwall Nssp 12800 | ||
| Sonicwall Sm9800 | ||
| All of | ||
| SonicWall SonicOS | <6.5.4.15.116n | |
| Any of | ||
| Sonicwall Nsa 2650 | ||
| Sonicwall Nsa 3600 | ||
| Sonicwall Nsa 3650 | ||
| Sonicwall Nsa 4600 | ||
| Sonicwall Nsa 4650 | ||
| Sonicwall Nsa 5600 | ||
| Sonicwall Nsa 5650 | ||
| Sonicwall Nsa 6600 | ||
| Sonicwall Nsa 6650 | ||
| Sonicwall Sm 9200 | ||
| Sonicwall Sm 9250 | ||
| Sonicwall Sm 9400 | ||
| Sonicwall Sm 9450 | ||
| Sonicwall Sm 9600 | ||
| Sonicwall Sm 9650 | ||
| Sonicwall Soho 250 | ||
| Sonicwall Soho 250w | ||
| Sonicwall Sohow | ||
| Sonicwall Tz 300 | ||
| Sonicwall Tz 300p | ||
| Sonicwall Tz 300w | ||
| Sonicwall Tz 350 | ||
| Sonicwall Tz 350w | ||
| Sonicwall Tz 400 | ||
| Sonicwall Tz 400w | ||
| Sonicwall Tz 500 | ||
| Sonicwall Tz 500w | ||
| Sonicwall Tz 600 | ||
| Sonicwall Tz 600p | ||
| All of | ||
| SonicWall SonicOS | <=7.0.1-5035 | |
| Any of | ||
| Sonicwall Nsa 2700 | ||
| Sonicwall Nsa 3700 | ||
| Sonicwall Nsa 4700 | ||
| Sonicwall Nsa 5700 | ||
| Sonicwall Nsa 6700 | ||
| Sonicwall Nssp 10700 | ||
| Sonicwall Nssp 11700 | ||
| Sonicwall Nssp 13700 | ||
| Sonicwall Tz270 | ||
| Sonicwall Tz270w | ||
| Sonicwall Tz370 | ||
| Sonicwall Tz370w | ||
| Sonicwall Tz470 | ||
| Sonicwall Tz470w | ||
| Sonicwall Tz570 | ||
| Sonicwall Tz570p | ||
| Sonicwall Tz570w | ||
| Sonicwall Tz670 |
Remedy
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-critical-access-control-flaw-in-sonicos/
- https://www.bleepingcomputer.com/news/security/sonicwall-sslvpn-access-control-flaw-is-now-exploited-in-attacks/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015;
- https://nvd.nist.gov/vuln/detail/CVE-2024-40766
- https://www.bleepingcomputer.com/news/security/critical-sonicwall-sslvpn-bug-exploited-in-ransomware-attacks/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
- https://www.theregister.com/2024/10/22/akira_encrypting_again/
- https://www.bleepingcomputer.com/news/security/fog-ransomware-targets-sonicwall-vpns-to-breach-corporate-networks/
- agent/weakness
- agent/type
- agent/first-publish-date
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-40766
- agent/title
- agent/remedy
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/nvd-cve
- agent/softwarecombine
- collector/the-register
- source/The Register
- agent/references
- agent/tags
- agent/event
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- vendor/sonicwall
- canonical/sonicwall sonicos
- canonical/sonicwall soho
- canonical/sonicwall nssp 12400
- canonical/sonicwall nssp 12800
- canonical/sonicwall sm9800
- canonical/sonicwall nsa 2650
- canonical/sonicwall nsa 3600
- canonical/sonicwall nsa 3650
- canonical/sonicwall nsa 4600
- canonical/sonicwall nsa 4650
- canonical/sonicwall nsa 5600
- canonical/sonicwall nsa 5650
- canonical/sonicwall nsa 6600
- canonical/sonicwall nsa 6650
- canonical/sonicwall sm 9200
- canonical/sonicwall sm 9250
- canonical/sonicwall sm 9400
- canonical/sonicwall sm 9450
- canonical/sonicwall sm 9600
- canonical/sonicwall sm 9650
- canonical/sonicwall soho 250
- canonical/sonicwall soho 250w
- canonical/sonicwall sohow
- canonical/sonicwall tz 300
- canonical/sonicwall tz 300p
- canonical/sonicwall tz 300w
- canonical/sonicwall tz 350
- canonical/sonicwall tz 350w
- canonical/sonicwall tz 400
- canonical/sonicwall tz 400w
- canonical/sonicwall tz 500
- canonical/sonicwall tz 500w
- canonical/sonicwall tz 600
- canonical/sonicwall tz 600p
- version/sonicwall sonicos/7.0.1-5035
- canonical/sonicwall nsa 2700
- canonical/sonicwall nsa 3700
- canonical/sonicwall nsa 4700
- canonical/sonicwall nsa 5700
- canonical/sonicwall nsa 6700
- canonical/sonicwall nssp 10700
- canonical/sonicwall nssp 11700
- canonical/sonicwall nssp 13700
- canonical/sonicwall tz270
- canonical/sonicwall tz270w
- canonical/sonicwall tz370
- canonical/sonicwall tz370w
- canonical/sonicwall tz470
- canonical/sonicwall tz470w
- canonical/sonicwall tz570
- canonical/sonicwall tz570p
- canonical/sonicwall tz570w
- canonical/sonicwall tz670