CVE-2024-40766—SonicWall SonicOS Improper Access Control Vulnerability

漏洞名称

SonicWall SonicOS Improper Access Control Vulnerability

描述

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
• https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2
• https://nvd.nist.gov/vuln/detail/CVE-2024-40766

相关新闻文章

• Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 AccountsOctober 11, 2025
• Akira ransomware: From SonicWall VPN login to encryption in under four hoursSeptember 29, 2025
• Akira ransomware breaching MFA-protected SonicWall VPN accountsSeptember 28, 2025
• SonicWall releases SMA100 firmware update to wipe rootkit malwareSeptember 23, 2025
• SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of CustomersSeptember 18, 2025

相关 CWE

• CWE-284