Saturday 7 November
Global

Your region, kept on this device.

SonicWall patches seven SonicOS flaws, including an exploited SSL-VPN auth bypass

Severity
High
Sources
1

has released updates fixing seven vulnerabilities in firewalls. One is an SSL-VPN authentication bypass flaw, which allows MFA to be bypassed, and it is already being exploited in attacks. Administrators running SonicOS with SSL-VPN should apply the updates promptly.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. Apply the SonicWall SonicOS security updates that fix the seven vulnerabilities.
  2. Check whether SSL-VPN is enabled on your SonicWall firewalls and prioritise those devices for patching.
  3. Review VPN authentication logs for signs of bypass or unexpected access.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Sat 7 NovemberSonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacksBleepingComputer

Who reported · 1 outlet

BleepingComputer

Who and what is in it

Companies

Products

Report a problem