Lucene search

SonicwallCVE-2024-40766

HistoryAug 23, 2024 - 7:15 a.m.

CVE-2024-40766

2024-08-2307:15:03

CWE-284

sonicwall

web.nvd.nist.gov

In Wild

improper access control

sonicwall sonicos

unauthorized resource access

firewall crash

cve-2024-40766

sonicwall firewall gen 5

sonicwall firewall gen 6

sonicwall gen 7

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.01

Percentile

84.1%

JSON

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Affected configurations

Nvd

Node

sonicwallsonicosRange<5.9.2.14-13o

AND

sonicwallsohoMatch-

Node

sonicwallsonicosRange<6.5.2.8-2n

AND

sonicwallnssp_12400Match-

sonicwallnssp_12800Match-

sonicwallsm9800Match-

Node

sonicwallsonicosRange<6.5.4.15.116n

AND

sonicwallnsa_2650Match-

sonicwallnsa_3600Match-

sonicwallnsa_3650Match-

sonicwallnsa_4600Match-

sonicwallnsa_4650Match-

sonicwallnsa_5600Match-

sonicwallnsa_5650Match-

sonicwallnsa_6600Match-

sonicwallnsa_6650Match-

sonicwallsm_9200Match-

sonicwallsm_9250Match-

sonicwallsm_9400Match-

sonicwallsm_9450Match-

sonicwallsm_9600Match-

sonicwallsm_9650Match-

sonicwallsoho_250Match-

sonicwallsoho_250wMatch-

sonicwallsohowMatch-

sonicwalltz_300Match-

sonicwalltz_300pMatch-

sonicwalltz_300wMatch-

sonicwalltz_350Match-

sonicwalltz_350wMatch-

sonicwalltz_400Match-

sonicwalltz_400wMatch-

sonicwalltz_500Match-

sonicwalltz_500wMatch-

sonicwalltz_600Match-

sonicwalltz_600pMatch-

Node

sonicwallsonicosRange≤7.0.1-5035

AND

sonicwallnsa_2700Match-

sonicwallnsa_3700Match-

sonicwallnsa_4700Match-

sonicwallnsa_5700Match-

sonicwallnsa_6700Match-

sonicwallnssp_10700Match-

sonicwallnssp_11700Match-

sonicwallnssp_13700Match-

sonicwalltz270Match-

sonicwalltz270wMatch-

sonicwalltz370Match-

sonicwalltz370wMatch-

sonicwalltz470Match-

sonicwalltz470wMatch-

sonicwalltz570Match-

sonicwalltz570pMatch-

sonicwalltz570wMatch-

sonicwalltz670Match-

VendorProductVersionCPE
sonicwallsonicos*cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwallsoho-cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*
sonicwallnssp_12400-cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*
sonicwallnssp_12800-cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*
sonicwallsm9800-cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*
sonicwallnsa_2650-cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*
sonicwallnsa_3600-cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*
sonicwallnsa_3650-cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*
sonicwallnsa_4600-cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*
sonicwallnsa_4650-cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	sonicos	*	cpe:2.3:o:sonicwall:sonicos::::::::
sonicwall	soho	-	cpe:2.3:h:sonicwall:soho:-:::::::*
sonicwall	nssp_12400	-	cpe:2.3:h:sonicwall:nssp_12400:-:::::::*
sonicwall	nssp_12800	-	cpe:2.3:h:sonicwall:nssp_12800:-:::::::*
sonicwall	sm9800	-	cpe:2.3:h:sonicwall:sm9800:-:::::::*
sonicwall	nsa_2650	-	cpe:2.3:h:sonicwall:nsa_2650:-:::::::*
sonicwall	nsa_3600	-	cpe:2.3:h:sonicwall:nsa_3600:-:::::::*
sonicwall	nsa_3650	-	cpe:2.3:h:sonicwall:nsa_3650:-:::::::*
sonicwall	nsa_4600	-	cpe:2.3:h:sonicwall:nsa_4600:-:::::::*
sonicwall	nsa_4650	-	cpe:2.3:h:sonicwall:nsa_4650:-:::::::*

Rows per page:

1-10 of 521

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Gen5",
      "Gen6",
      "Gen7"
    ],
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "5.9.2.14-12o and older versions"
      },
      {
        "status": "affected",
        "version": "6.5.4.14-109n and older versions"
      },
      {
        "status": "affected",
        "version": "7.0.1-5035 and older versions"
      }
    ]
  }
]