SonicWall warns users: Patch critical firewall flaw to prevent exploitation

TLDR:

• SonicWall has patched a critical security flaw in SonicOS, urging users to update immediately.
• The vulnerability (CVE-2024-40766) could lead to unauthorized resource access and firewall crashes.

SonicWall has revealed that a critical security flaw impacting SonicOS, tracked as CVE-2024-40766, may be actively exploited, prompting users to apply patches as soon as possible. The vulnerability carries a CVSS score of 9.3 out of 10 and could potentially lead to unauthorized resource access and firewall crashes. SonicWall has identified the flaw in SonicOS management access and SSLVPN features and recommends applying the patches to affected products. As temporary workarounds, restricting firewall management to trusted sources and limiting SSLVPN access are advised. Multi-factor authentication and password updates are also recommended for additional security measures. Although details about the exploitation of the flaw in the wild are scarce, previous incidents involving unpatched SonicWall appliances emphasize the importance of prompt patching.