CVE-2024-40766
SonicWall SonicOS Improper Access Control Vulnerability
Published Aug 23, 2024 · updated Sep 21, 2026 · sonicwall sonicos
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Timeline
Detection, updates, and resolution for this record.
Aug 23, 2024 · Catalog
Detected
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Sep 9, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sep 30, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sep 21, 2026 · Catalog
Updated
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Sep 30, 2024
Affected
- cpe sonicwall/sonicosversion unspecified
- vendor SonicWall SonicOSversion unspecified
Sources
- CISA KEVCVE-2024-40766
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
cisa.gov - CVE.orgCVE-2024-40766
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-40766
30-day exploitation probability 18.4%
first.org - NIST NVDCVE-2024-40766
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, a
nvd.nist.gov