ZDI-CAN-24818: ZDI-25-011: SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability
Published Jan 9, 2025
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-40762.
Affected Software
1 affected component
SonicWALL NSv
Event History
Jan 9, 2025
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-24818?
The severity of ZDI-CAN-24818 is rated at 8.8 on the CVSS scale.
2
How do I fix ZDI-CAN-24818?
To fix ZDI-CAN-24818, update your SonicWALL NSv installations to the latest patched version provided by SonicWall.
3
Who can exploit ZDI-CAN-24818?
ZDI-CAN-24818 can be exploited by remote attackers without requiring authentication.
4
What is the impact of ZDI-CAN-24818?
The impact of ZDI-CAN-24818 is a bypass of authentication, allowing unauthorized access to the affected SonicWALL NSv installations.
5
What CVE is associated with ZDI-CAN-24818?
The CVE associated with ZDI-CAN-24818 is CVE-2024-40762.