9.3
Critique
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-284
Description
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SonicOS | Versions non publiées |
Autres CVE de SonicOS
Les 75 CVE de SonicOS →
CVE-2026-19703
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…
5.1
Moyenne
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…
5.9
Moyenne
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
5.9
Moyenne
CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
7.5
Élevée