Critical · published August 23, 2024
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 97.2th percentile for exploit probability.
🚨 An improper access control flaw in SonicWall SonicOS could let unauthorized users waltz right in and access sensitive resources! 🔥 Think of it like a security guard at a club who just lets anyone through the ropes without checking IDs. In this case, the firewall acts like that careless bouncer, risking a complete shutdown when the wrong people gain access. If exploited, this vulnerability could lead to a breach of sensitive information, potentially allowing attackers to take control of critical systems or even crash the firewall entirely. This could result in devastating downtime and loss of access to vital resources, putting your entire network at risk.
Think of it like a security guard at a club who just lets anyone through the ropes without checking IDs. In this case, the firewall acts like that careless bouncer, risking a complete shutdown when the wrong people gain access. This vulnerability arises from improper access control mechanisms in SonicWall SonicOS, affecting Gen 5, Gen 6, and Gen 7 devices running versions 7.0.1-5035 and older, allowing unauthorized access under certain conditions.
If exploited, this vulnerability could lead to a breach of sensitive information, potentially allowing attackers to take control of critical systems or even crash the firewall entirely. This could result in devastating downtime and loss of access to vital resources, putting your entire network at risk. It's crucial to update your SonicWall devices immediately to the latest version to close this security gap. Ensure your firewall is set to enforce strict access controls and review and adjust your security policies as necessary. You've got this! Stay vigilant, patch those devices, and keep your network safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| sonicwall/sonicos | < 5.9.2.14-13o | 5.9.2.14-13o |
| sonicwall/sonicos | < 6.5.2.8-2n | 6.5.2.8-2n |
| sonicwall/sonicos | < 6.5.4.15.116n | 6.5.4.15.116n |
| sonicwall/sonicos | ≤ 7.0.1-5035 | — |