Security News > 2021 > February > Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices
"A few thousand devices are impacted," SonicWall said in a statement, adding, "SMA 100 firmware prior to 10.x is unaffected by this zero-day vulnerability."
On January 22, The Hacker News exclusively revealed that SonicWall had been breached as a consequence of a coordinated attack on its internal systems by exploiting "Probable zero-day vulnerabilities" in its SMA 100 series remote access devices.
While SonicWall has not shared many details about the intrusion citing an ongoing investigation, the latest development points to evidence that a critical zero-day in the SMA 100 series 10.x code may have been exploited to carry out the attack.
"If the SMA 100 series is behind a firewall, block all access to the SMA 100 on the firewall," the company said.
SonicWall has formally released a patch to address a zero-day vulnerability in SMA 100 series 10.x code.
"All SonicWall customers with active SMA 100 series devices running 10.x code should immediately apply the patch on physical and virtual appliances," the company said in a statement.
News URL
Related news
- Hackers target critical zero-day vulnerability in PTZ cameras (source)
- Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited (source)
- Iranian hackers act as brokers selling critical infrastructure access (source)
- Hackers exploit 52 zero-days on the first day of Pwn2Own Ireland (source)
- Fortinet warns of new critical FortiManager flaw used in zero-day attacks (source)
- Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day (source)
- Over 70 zero-day flaws get hackers $1 million at Pwn2Own Ireland (source)
- Palo Alto Networks warns of critical RCE zero-day exploited in attacks (source)
- Chinese hackers exploit Fortinet VPN zero-day to steal credentials (source)
- Palo Alto Networks tackles firewall-busting zero-days with critical patches (source)