CVE-2024-407669.3CriticalCWE-284
CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability
SonicWall · SonicOS
Vendor fix available · Affected: SonicWall SonicOS · Exploitation: in CISA KEV since 9 Sep 2024
Known ransomware useExploitation attributed to Akira (reported by SANS ISC); Fog (reported by SANS ISC)
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue9 Sep 2024
- Exploited (reported)SANS ISC23 Jun
- Scanning observed: not seen
- Proof of concept public: not seen
- Not established: not seen
Who exploits it, and who says so
- Akira, reported by SANS ISC23 Jun
- Fog, reported by SANS ISC23 Jun
18.4%probability of exploitation in the next 30 days
97th percentile
050100
Higher than 97% of scored CVEs
9.3CriticalCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 9 Sep · catalogue entry
Passed 775 days ago
DescriptionNVD
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
- CISA KEV
- Listed since 9 Sep 2024 · known ransomware use · catalogue entry
- Public check
- No public nuclei template
- Vendor
- SonicWall
- Published
- August 2024
What changed
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Coverage1 article · 1 outlet
First in our coverage: SANS ISC, 23 Jun.
- CVE-2024-40766 exposes SonicWall firewalls to ransomwareSANS ISC · first in our coverage
New articles also arrive in the RSS feed.