SonicWall fixes vital SonicOS flaw

TLDR:

• SonicWall has patched a critical vulnerability (CVE-2024-40766) in its SonicOS network security appliance operating system that can result in unauthorized access or a firewall crash.
• The vulnerability impacts SonicWall Gen 5, Gen 6, and Gen 7 firewalls, and updates are available for affected versions.

SonicWall has released a patch for a critical vulnerability (CVE-2024-40766) in its SonicOS network security appliance operating system. This vulnerability has been described as an improper access control issue that can lead to unauthorized access or cause a firewall crash. The affected versions include SonicWall Gen 5, Gen 6, and Gen 7 firewalls. While the vulnerability can be resolved with updates, users are advised to install the latest firmware versions even if they are on Gen 7 products. Although there is no mention of in-the-wild exploitation, given the history of threat actors targeting SonicWall products, it is crucial for customers to apply the patch promptly.