Lucene search

[email protected]NVD:CVE-2024-40766

HistoryAug 23, 2024 - 7:15 a.m.

CVE-2024-40766

2024-08-2307:15:03

CWE-284

[email protected]

web.nvd.nist.gov

access control

sonicwall

sonicos

unauthorized resource access

firewall crash

gen 5

gen 6

gen 7

sonicos 7.0.1-5035

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.01

Percentile

84.1%

JSON

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Affected configurations

Nvd

Node

sonicwallsonicosRange<5.9.2.14-13o

AND

sonicwallsohoMatch-

Node

sonicwallsonicosRange<6.5.2.8-2n

AND

sonicwallnssp_12400Match-

sonicwallnssp_12800Match-

sonicwallsm9800Match-

Node

sonicwallsonicosRange<6.5.4.15.116n

AND

sonicwallnsa_2650Match-

sonicwallnsa_3600Match-

sonicwallnsa_3650Match-

sonicwallnsa_4600Match-

sonicwallnsa_4650Match-

sonicwallnsa_5600Match-

sonicwallnsa_5650Match-

sonicwallnsa_6600Match-

sonicwallnsa_6650Match-

sonicwallsm_9200Match-

sonicwallsm_9250Match-

sonicwallsm_9400Match-

sonicwallsm_9450Match-

sonicwallsm_9600Match-

sonicwallsm_9650Match-

sonicwallsoho_250Match-

sonicwallsoho_250wMatch-

sonicwallsohowMatch-

sonicwalltz_300Match-

sonicwalltz_300pMatch-

sonicwalltz_300wMatch-

sonicwalltz_350Match-

sonicwalltz_350wMatch-

sonicwalltz_400Match-

sonicwalltz_400wMatch-

sonicwalltz_500Match-

sonicwalltz_500wMatch-

sonicwalltz_600Match-

sonicwalltz_600pMatch-

Node

sonicwallsonicosRange≤7.0.1-5035

AND

sonicwallnsa_2700Match-

sonicwallnsa_3700Match-

sonicwallnsa_4700Match-

sonicwallnsa_5700Match-

sonicwallnsa_6700Match-

sonicwallnssp_10700Match-

sonicwallnssp_11700Match-

sonicwallnssp_13700Match-

sonicwalltz270Match-

sonicwalltz270wMatch-

sonicwalltz370Match-

sonicwalltz370wMatch-

sonicwalltz470Match-

sonicwalltz470wMatch-

sonicwalltz570Match-

sonicwalltz570pMatch-

sonicwalltz570wMatch-

sonicwalltz670Match-

VendorProductVersionCPE
sonicwallsonicos*cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwallsoho-cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*
sonicwallnssp_12400-cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*
sonicwallnssp_12800-cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*
sonicwallsm9800-cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*
sonicwallnsa_2650-cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*
sonicwallnsa_3600-cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*
sonicwallnsa_3650-cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*
sonicwallnsa_4600-cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*
sonicwallnsa_4650-cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	sonicos	*	cpe:2.3:o:sonicwall:sonicos::::::::
sonicwall	soho	-	cpe:2.3:h:sonicwall:soho:-:::::::*
sonicwall	nssp_12400	-	cpe:2.3:h:sonicwall:nssp_12400:-:::::::*
sonicwall	nssp_12800	-	cpe:2.3:h:sonicwall:nssp_12800:-:::::::*
sonicwall	sm9800	-	cpe:2.3:h:sonicwall:sm9800:-:::::::*
sonicwall	nsa_2650	-	cpe:2.3:h:sonicwall:nsa_2650:-:::::::*
sonicwall	nsa_3600	-	cpe:2.3:h:sonicwall:nsa_3600:-:::::::*
sonicwall	nsa_3650	-	cpe:2.3:h:sonicwall:nsa_3650:-:::::::*
sonicwall	nsa_4600	-	cpe:2.3:h:sonicwall:nsa_4600:-:::::::*
sonicwall	nsa_4650	-	cpe:2.3:h:sonicwall:nsa_4650:-:::::::*