CVE-2024-40766 is a critical improper access control vulnerability in SonicWall SonicOS management access, affecting Gen 5, Gen 6, and specific Gen 7 firewalls. With a CVSS score of 9.8, it allows unauthenticated remote attackers to gain unauthorized resource access and potentially crash the firewall, requiring no user interaction. This flaw is actively exploited in the wild, notably by the Akira ransomware group, despite a lack of public exploit code, and has garnered significant community and media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.9.2.14-13oCPE matchmatch criteria | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | ||
< 6.5.2.8-2nCPE matchmatch criteria | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | ||
< 6.5.4.15.116nCPE matchmatch criteria | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | ||
<= 7.0.1-5035CPE matchmatch criteria | cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.