SonicWall SonicOS Improper Access Control Vulnerability
Critical CVSS 9.8 Listed in CISA KEV
Summary
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- SonicWall:SonicOS
- :
- :
- :
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2024-40766 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015; reference
- https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2 reference
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40766 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD