High Threat Security Alert (A25-08-05): Security Threat affecting SonicWall Gen 7 Firewalls

Description:

SonicWall released a security advisory to address the recent threat activity affecting SonicWall Gen 7 Firewalls. The detailed information can be found at:
https://www.sonicwall.com/support/notices/gen-7-sonicwall-firewalls-sslvpn-recent-threat-activity/250804095336430

Reports indicated that the recent threat activities involving Gen 7 SonicWall Firewalls with SSLVPN enabled were related to a previously disclosed improper access control vulnerability (CVE-2024-40766). SonicWall has released a firmware update to address the issue. System administrators are advised to apply the latest firmware for your affected systems and follow the recommendations provided by SonicWall to mitigate the elevated risk of cyber attacks.

Affected Systems:

• SonicWall Gen 7 Firewalls with SSLVPN enabled

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, security restriction bypass and information disclosure on the affected system.

Recommendation:

The latest firmware for affected systems is now available. Administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.sonicwall.com/support/notices/gen-7-sonicwall-firewalls-sslvpn-recent-threat-activity/250804095336430