Security · High impactFan score 66 · Tier A
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
BleepingComputer · By Lawrence Abrams ·
The Brief
- SonicWall has released security updates fixing seven vulnerabilities in SonicOS firewalls.
- One of the fixed flaws is an SSL-VPN authentication bypass that affects MFA and is exploited in attacks.
- The sources do not give CVE identifiers or CVSS scores.
Why it matters
An exploited MFA bypass on an internet-facing SSL-VPN gateway can give attackers access to internal networks, so affected firewalls should be patched promptly.
Who’s affected
- SonicWall SonicOS firewall administrators
- Organizations using SSL-VPN on SonicWall firewalls
What to do
- Apply the SonicOS security updates that fix the seven vulnerabilities
- #sonicwall
- #sonicos
- #vpn
- #vulnerability
- #firewall
- #patch
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
Timeline
SonicWall releases security updates fixing seven SonicOS flaws, including an exploited SSL-VPN MFA bypass
BleepingComputer
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks