9.1
Critique
CVE-2024-12802 SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…
Description
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.
Produits et versions touchés
Autres CVE de SonicOS
Les 75 CVE de SonicOS →
CVE-2026-19703
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…
5.1
Moyenne
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…
5.9
Moyenne
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
5.9
Moyenne
CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
7.5
Élevée