CVE-2024-40766

CRITICAL9.8

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash

Published Aug 23, 2024

Modified 8 months ago

Details

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

References

ADVISORY

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015

WEB

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40766

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-40766

CVSS Analysis

CVSS v3.1

9.3

Exploitability

Attack Vector