← CVE Radar
CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
9.8 CRITICALEPSS 18.37%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 9.3 | CRITICAL | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L |
CISA required action
⚡ Known exploited · remediation due Sep 30, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2024-40766
- Status
- Analyzed
- Assigner (CNA)
- sonicwall
- Published
- Aug 23, 2024
- Last modified
- 2026-09-21 21:17 UTC
- Weaknesses
- CWE-284 · Improper Access Control
Affected Products
As published by the CNA in the CVE record.
SonicWallSonicOS3 version ranges
- 5.9.2.14-12o and older versions
- 6.5.4.14-109n and older versions
- 7.0.1-5035 and older versions