Security · High impactFan score 64 · Tier A
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
The Hacker News ·
The Brief
- CISA added a high-severity SonicWall SonicOS vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.
- The flaw is reported as an MFA bypass, according to the headline.
- CISA acted after reports that the flaw may have been exploited in real-world attacks.
Why it matters
Organizations running SonicWall SonicOS may have exposed firewalls where multi-factor authentication can be bypassed, so they should check their exposure against the KEV entry.
Who’s affected
- Organizations running SonicWall SonicOS devices
- #sonicwall
- #sonicos
- #mfa-bypass
- #cisa
- #kev
- #vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks. The…
Timeline
The Hacker News reports CISA added the SonicOS MFA bypass flaw to its KEV catalog
The Hacker News
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation