CVE-2024-40766
Severity CVSS v4.0:
Pending analysis
Type:
CWE-284
Improper Access Control
Publication date:
23/08/2024
Last modified:
31/10/2025
Description
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | 5.9.2.14-13o (excluding) | |
| cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | 6.5.2.8-2n (excluding) | |
| cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | 6.5.4.15.116n (excluding) | |
| cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page