VULNERABILITY INTELLIGENCE

CVE-2024-40766

CVSS score9.8 CRITICAL
EPSS probability18.38%
CISA KEVKnown exploited vulnerability
Published2024-08-23
Last modified2026-09-21
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

SonicWall SonicOS Improper Access Control Vulnerability

Vendor / product: SonicWall / SonicOS

Description

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Weakness classification

  • PSIRT@sonicwall.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references