ZDI-25-011: SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability
Published Jan 9, 2025
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-40762.
Affected Software
1 affected component
SonicWALL NSv
Event History
Jan 9, 2025
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-25-011?
The severity of ZDI-25-011 is rated at 8.8 according to the CVSS system.
2
How do I fix ZDI-25-011?
To fix ZDI-25-011, update to the latest version of SonicWALL NSv that addresses this vulnerability.
3
Who is affected by ZDI-25-011?
Users of SonicWALL NSv installations are affected by ZDI-25-011.
4
Can ZDI-25-011 be exploited without authentication?
Yes, ZDI-25-011 can be exploited without the need for authentication.
5
What CVEs are associated with ZDI-25-011?
CVE-2024-40762 is the CVE assigned to ZDI-25-011.