ZDI-24-421: SonicWALL GMS Virtual Appliance ECMClientAuthenticator Hard-Coded Credential Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL GMS Virtual Appliance. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-29011.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-421?
The ZDI-24-421 vulnerability has a CVSS rating of 7.5, indicating a high severity level.
How do I fix ZDI-24-421?
To fix ZDI-24-421, apply the latest security patch provided by SonicWALL for the GMS Virtual Appliance.
Who is affected by ZDI-24-421?
The ZDI-24-421 vulnerability affects installations of SonicWALL GMS Virtual Appliance.
What type of vulnerability is ZDI-24-421?
ZDI-24-421 is an authentication bypass vulnerability that allows remote attackers to exploit affected systems without authentication.
Can ZDI-24-421 be exploited remotely?
Yes, ZDI-24-421 can be exploited remotely without the need for authentication.