Security News > 2021 > February > Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

"A few thousand devices are impacted," SonicWall said in a statement, adding, "SMA 100 firmware prior to 10.x is unaffected by this zero-day vulnerability."

On January 22, The Hacker News exclusively revealed that SonicWall had been breached as a consequence of a coordinated attack on its internal systems by exploiting "Probable zero-day vulnerabilities" in its SMA 100 series remote access devices.

While SonicWall has not shared many details about the intrusion citing an ongoing investigation, the latest development points to evidence that a critical zero-day in the SMA 100 series 10.x code may have been exploited to carry out the attack.

"If the SMA 100 series is behind a firewall, block all access to the SMA 100 on the firewall," the company said.

SonicWall has formally released a patch to address a zero-day vulnerability in SMA 100 series 10.x code.

"All SonicWall customers with active SMA 100 series devices running 10.x code should immediately apply the patch on physical and virtual appliances," the company said in a statement.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/mzsfpr0j8tg/hackers-exploiting-critical-zero-day.html