CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: yes — in CISA KEV since 2024-09-09
EPSS: 18.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-23 · updated 2026-09-21
Weakness: CWE-284

Description

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Summary

CVE-2024-40766 is an improper access control flaw in SonicWall SonicOS management access that can allow unauthorized resource access and, under specific conditions, crash the firewall. It affects SonicWall Firewall Gen 5 and Gen 6 devices, plus Gen 7 devices running SonicOS 7.0.1-5035 and older. Rated CVSS 9.8 critical, it is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation. Apply the fixed SonicOS versions 5.9.2.14-13o, 6.5.2.8-2n, and 6.5.4.15.116n, or follow vendor mitigations and discontinue use if none are available.

CVE-2024-40766 هو خلل في التحكم في الوصول ضمن واجهة إدارة SonicWall SonicOS قد يسمح بالوصول غير المصرح به إلى الموارد، وفي ظروف محددة بالتسبب في تعطل الجدار الناري. يؤثر الخلل في أجهزة SonicWall Firewall من الجيلين 5 و6، وأجهزة الجيل 7 التي تعمل بـ SonicOS 7.0.1-5035 والإصدارات الأقدم. صُنّف بدرجة 9.8 حرجة، وهو مدرج في كتالوج CISA للثغرات المعروفة باستغلالها مع استغلال نشط. طبّق الإصدارات المُصلحة 5.9.2.14-13o و6.5.2.8-2n و6.5.4.15.116n، أو اتبع إرشادات المورّد للتخفيف، وتوقف عن استخدام المنتج إن لم تتوفر معالجات.

Affected products

SonicWall SonicOS: before 5.9.2.14-13o; before 6.5.2.8-2n; before 6.5.4.15.116n; through 7.0.1-5035 — fixed in 5.9.2.14-13o, 6.5.2.8-2n, 6.5.4.15.116n

How to fix

Upgrade to a fixed version: SonicWall SonicOS 5.9.2.14-13o, 6.5.2.8-2n, 6.5.4.15.116n. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-40766 or the next vulnerability affects your stack