Vulnerability · high
SonicWall fixes seven SonicOS flaws including exploited SSL-VPN MFA bypass
Tier A · Patch today – Before you go home
Who’s exposed: SonicOS firewall owners with SSL-VPN enabled
Tier A because: Core infrastructure or popular tool AND exploited in the wild
Reach
Attack
Damage
Fix
Popular tool · Exploited in the wild · Remote, no login
What to do
- Apply the SonicOS security updates that fix the seven vulnerabilities
The Brief
- SonicWall has released security updates fixing seven vulnerabilities in SonicOS firewalls.
- One of the fixed flaws is an SSL-VPN authentication bypass that affects MFA and is exploited in attacks.
- The sources do not give CVE identifiers or CVSS scores.
Why it matters
An exploited MFA bypass on an internet-facing SSL-VPN gateway can give attackers access to internal networks, so affected firewalls should be patched promptly.
The checklist behind the tier
Checklist · 4 of 10 yes
| Yes | Hits tech teams | Judgment: SonicWall firewalls and SSL-VPN appliances are network security appliances that IT teams run. |
| No | Core infrastructure | Judgment: a single vendor's firewall appliance, not software nearly every team runs. |
| Yes | Popular tool | Judgment: SonicWall is a widely deployed firewall appliance used by many organisations. |
| Yes | Exploited in the wild | BleepingComputer: SSL-VPN MFA bypass flaw is exploited in attacks. |
| No | Public exploit | BleepingComputer: no source mentions published exploit code or a proof-of-concept. |
| Yes | Remote, no login | BleepingComputer: SSL-VPN authentication bypass flaw, which implies network access without credentials. |
| No | Full takeover | BleepingComputer: sources do not state code execution, root or admin rights. |
| No | Secrets exposed | BleepingComputer: no source reports credentials, configs or data being stolen. |
| No | Supply chain | BleepingComputer: a vendor's own product flaws; no compromised update or package reported. |
| No | No fix yet | BleepingComputer: SonicWall has released security updates fixing the seven vulnerabilities. |
Timeline
SonicWall releases security updates fixing seven SonicOS flaws, including an exploited SSL-VPN MFA bypass
BleepingComputer
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
Source
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks ↗ BleepingComputer · 2h ago
First seen · 1 source · Full story page · How tiers are decided