Security News > 2024 > August > SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)
![SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)](/static/build/img/news/sonicwall-patches-critical-flaw-affecting-its-firewalls-cve-2024-40766-medium.jpg)
SonicWall has patched a critical vulnerability (CVE-2024-40766) in its next-gen firewalls that could allow remote attackers unauthorized access to resources and, in specific conditions, to crash the appliances. About CVE-2024-40766 CVE-2024-40766 is an improper access control vulnerability in the “SonicWall SonicOS management access”, the company says. “This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.” Security updates fixing the vulnerability are … More → The post SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766) appeared first on Help Net Security.
News URL
https://www.helpnetsecurity.com/2024/08/26/cve-2024-40766/
Related news
- SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access (source)
- Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCE (source)
- Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929) (source)
- Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419) (source)
- Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991) (source)
- Docker fixes critical auth bypass flaw, again (CVE-2024-41110) (source)
- Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327) (source)
- Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249) (source)
- Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856) (source)
- Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218) (source)