CVE entry · CVE-2024-40766
CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
- Actively exploited: added to CISA’s KEV catalog on September 9, 2024.
- Used by ransomware, according to CISA.
- Remediation deadline for US federal agencies: September 30, 2024.
- CERT-FR alert CERTFR-2025-ALE-011 of August 5, 2025.
Description from CISA’s KEV catalog.
CERT-FR alerts and notices
-
CERTFR-2025-ALE-011Incidents de sécurité dans les pare-feux SonicWall (05 août 2025)
-
CERTFR-2024-ALE-011Vulnérabilité dans SonicWall (10 septembre 2024)
What to do
- Check whether your estate includes SonicWall SonicOS, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (psirt.global.sonicwall.com)
- Vendor advisory or reference cited by CISA (www.sonicwall.com)
- NVD entry (NIST)
- CISA KEV catalog
Other SonicWall vulnerabilities
-
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
-
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
-
CVE-2026-15410Used by ransomwareSonicWall SMA1000 Appliances Code Injection Vulnerability
-
CVE-2026-15409Used by ransomwareSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
-
SonicWall SMA1000 Missing Authorization Vulnerability