Vulnerability · 1 source · latest 2h

SonicWall patches seven SonicOS flaws, including an exploited SSL-VPN auth bypass

VULNERABILITYSonicWallredteam/daily · 1 source

Severity: High
Sources: 1

What happened

SonicWall has released security updates addressing seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass that is being exploited in the wild and is described as an MFA bypass. The article does not list CVE identifiers or affected and fixed firmware versions, so these should be taken from SonicWall's advisory. Defenders should prioritise patching internet-facing SonicOS appliances with SSL-VPN enabled, review VPN authentication logs for signs of bypass, and check for unexpected sessions or configuration changes.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Apply the SonicWall SonicOS security updates that fix the seven vulnerabilities.
Check whether SSL-VPN is enabled on your SonicWall firewalls and prioritise those devices for patching.
Review VPN authentication logs for signs of bypass or unexpected access.

Written by AI from the sources, checked against them

Read the full story at the source