SonicWall warns of unpatched flaws in end-of-life GMS software

Tier C · Keep an eye on it – Check if you’re affected

Who’s exposed: Customers running end-of-life SonicWall GMS

Tier C because: Hits tech teams

Reach

Attack

Damage

Fix

No fix yet

The Brief

SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems.
SonicWall says the flaws will not be patched because the GMS software has reached end of life.

Organizations still running end-of-life SonicWall GMS have no vendor fix for these flaws, so they remain exposed unless they take other steps.

Checklist · 2 of 10 yes

Yes	Hits tech teams	SonicWall GMS is enterprise firewall management software that IT teams run and are responsible for.
No	Core infrastructure	Single vendor's management product, not software nearly every team runs.
No	Popular tool	Niche enterprise management product tied to one vendor's appliances, not mainstream developer tech.
No	Exploited in the wild	BleepingComputer: the excerpt reports no observed attacks using these flaws.
No	Public exploit	BleepingComputer: the excerpt mentions only a warning, with no published exploit code.
No	Remote, no login	BleepingComputer: the excerpt does not state the flaws can be exploited without credentials.
No	Full takeover	BleepingComputer: the excerpt does not describe code execution or admin takeover.
No	Secrets exposed	BleepingComputer: the excerpt reports no stolen or exposed credentials, keys or data.
No	Supply chain	BleepingComputer: the excerpt describes flaws, not compromised packages or updates.
Yes	No fix yet	BleepingComputer: SonicWall warned that the flaws in end-of-life GMS will not be patched.

Nov 4
SonicWall warns customers of two unpatched flaws in end-of-life GMS software
Nov 4 · 2:42 PM
BleepingComputer
SonicWall warns of unpatched flaws in end-of-life GMS software

First seen 2d ago · 1 source · Full story page · How tiers are decided