{"id":77606,"date":"2024-09-06T08:56:37","date_gmt":"2024-09-06T08:56:37","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=77606"},"modified":"2024-09-06T08:56:40","modified_gmt":"2024-09-06T08:56:40","slug":"sonicwall-vulnerability-exploited-wild","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/","title":{"rendered":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild"},"content":{"rendered":"\n

SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall<\/a> products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.<\/p>\n\n\n\n

The vulnerability, with a CVSS score of 9.3, impacts SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS versions 7.0.1-5035 and older.<\/p>\n\n\n\n

Decoding Compliance: What CISOs Need to Know \u2013\u00a0Join Free Webinar<\/a><\/strong><\/p>\n\n\n\n

If successfully exploited, it could lead to unauthorized resource access and, in specific conditions, cause the firewall to crash.<\/p>\n\n\n\n

SonicWall has released patches to address the issue:<\/p>\n\n\n\n

Impacted Platforms<\/th>Impacted Versions<\/th>Fixed Versions<\/th><\/tr><\/thead>
SOHO (Gen 5)<\/td>5.9.2.14-12o and older versions<\/td>5.9.2.14-13o<\/td><\/tr>
Gen6 Firewalls (SOHOW, TZ 300, TZ 300W, TZ 400, TZ 400W, TZ 500, TZ 500W, TZ 600, NSA 2650, NSA 3600, NSA 3650, NSA 4600, NSA 4650, NSA 5600, NSA 5650, NSA 6600, NSA 6650, SM 9200, SM 9250, SM 9400, SM 9450, SM 9600, SM 9650, TZ 300P, TZ 600P, SOHO 250, SOHO 250W, TZ 350, TZ 350W)<\/td>6.5.4.14-109n and older versions<\/td>6.5.2.8-2n (for SM9800, NSsp 12400, NSsp 12800)
6.5.4.15.116n (for other Gen6 Firewall appliances)<\/td><\/tr>
Gen7 Firewalls (TZ270, TZ270W, TZ370, TZ370W, TZ470, TZ470W, TZ570, TZ570W, TZ570P, TZ670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700)<\/td>SonicOS build version 7.0.1-5035 and older versions<\/td>Any version higher than 7.0.1-5035*<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

The company strongly urges<\/a> all customers to apply these patches immediately, as the vulnerability is believed to be under active exploitation. Users can download the latest patch builds from mysonicwall.com.<\/p>\n\n\n\n

SonicWall recommends implementing workarounds to minimize the potential impact for those unable to patch immediately. These include restricting firewall management to trusted sources and disabling firewall WAN management from Internet access. Similar precautions should be taken for SSLVPN<\/a> access.<\/p>\n\n\n\n

Additionally, SonicWall advises customers using Gen5 and Gen6 firewalls with SSLVPN users who have locally managed accounts to update their passwords immediately. Administrators should enable the “User must change password” option for each local account to enforce this critical security measure.<\/p>\n\n\n\n

The company also recommends enabling Multi-Factor Authentication (MFA)<\/a> for all SSLVPN users, using either TOTP or Email-based OTP methods.<\/p>\n\n\n\n

Given the critical nature of this vulnerability and its potential exploitation, organizations using affected SonicWall products should treat this as a high-priority security issue. Prompt action in applying patches or implementing recommended workarounds is crucial to mitigate the risk of unauthorized access or system crashes.<\/p>\n\n\n\n

SonicWall’s swift response in releasing patches and providing detailed mitigation strategies underscores the severity of this security threat. Users are encouraged to stay vigilant and monitor their networks for any signs of suspicious activity.<\/p>\n\n\n\n

Download Free Incident Response Plan Template for Your Security Team \u2013\u00a0Free Download<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users. The vulnerability, with a CVSS score of 9.3, impacts SonicWall Firewall Gen 5 and Gen 6 devices, as […]<\/p>\n","protected":false},"author":1,"featured_media":77608,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp","fifu_image_alt":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,53],"tags":[149,151,416],"class_list":{"0":"post-77606","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-vulnerability","9":"tag-cyber-security","10":"tag-cyber-security-news","11":"tag-vulnerability"},"yoast_head":"\nSonicWall Warns of Access Control Vulnerability Exploited in the Wild<\/title>\n<meta name=\"description\" content=\"SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SonicWall Warns of Access Control Vulnerability Exploited in the Wild\" \/>\n<meta property=\"og:description\" content=\"SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/guruba008\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-06T08:56:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-06T08:56:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp\" \/>\n<meta name=\"author\" content=\"Guru Baran\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@guruba008\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Guru Baran\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild","description":"SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/","og_locale":"en_US","og_type":"article","og_title":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild","og_description":"SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.","og_url":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_author":"https:\/\/www.facebook.com\/guruba008","article_published_time":"2024-09-06T08:56:37+00:00","article_modified_time":"2024-09-06T08:56:40+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp","type":"","width":"","height":""}],"author":"Guru Baran","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp","twitter_creator":"@guruba008","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Guru Baran","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/"},"author":{"name":"Guru Baran","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/f7f138f8fd41a61bb60151da47730026"},"headline":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild","datePublished":"2024-09-06T08:56:37+00:00","dateModified":"2024-09-06T08:56:40+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/"},"wordCount":439,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#primaryimage"},"thumbnailUrl":"https:\/\/i1.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news","vulnerability"],"articleSection":["Cyber Security News","Vulnerability"],"inLanguage":"en-US","copyrightYear":"2024","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/","url":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/","name":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#primaryimage"},"thumbnailUrl":"https:\/\/i1.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2024-09-06T08:56:37+00:00","dateModified":"2024-09-06T08:56:40+00:00","description":"SonicWall has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-40766) affecting its firewall products. The company warns that this improper access control flaw is potentially being exploited in the wild, prompting immediate action from users.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#primaryimage","url":"https:\/\/i1.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i1.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900","caption":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/sonicwall-vulnerability-exploited-wild\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"SonicWall Warns of Access Control Vulnerability Exploited in the Wild"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World's #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/f7f138f8fd41a61bb60151da47730026","name":"Guru Baran","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/72f86da0bb72b6886d25f0ef0c881daba3a98356bc44f916f8d3a62c9e856579?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/72f86da0bb72b6886d25f0ef0c881daba3a98356bc44f916f8d3a62c9e856579?s=96&d=mm&r=g","caption":"Guru Baran"},"description":"Gurubaran is the Co-Founder and Editor-in-Chief of CyberSecurityNews.com, specializing in vulnerability analysis, malware research, ransomware, and computer forensics.","sameAs":["https:\/\/cybersecuritynews.com","https:\/\/www.facebook.com\/guruba008","https:\/\/www.linkedin.com\/in\/gurubaran-cyberwrites\/","https:\/\/x.com\/guruba008"],"url":"https:\/\/cybersecuritynews.com\/author\/guru\/"}]}},"jetpack_featured_media_url":"https:\/\/i1.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRiPLn07b-dKL51VblgKUKSHtu12GLuXE-8WhfdqI32cbxrvL83ZImny_ywwhB2aBo_N3NYpvDmQw8N33pJUpHnQoWxG7WVXozxnm5iIAm5kBszUttSn0Wf2Ir877_1tR-zUVk1gO5-2z5PRyFkTXktO2HgVugm8wLNDHNiRbFwHrlQs1t_tLbvfcxiNtZ\/s16000\/CVE-2024-40766%20-%20Exploited%20in%20the%20Wild.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/77606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=77606"}],"version-history":[{"count":1,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/77606\/revisions"}],"predecessor-version":[{"id":77607,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/77606\/revisions\/77607"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/77608"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=77606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=77606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=77606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}