SonicWall warns of possible exploitation of SSLVPN flaw that bypasses MFA
VULNERABILITYSonicWallredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
SonicWall, which makes firewalls and remote access products, has told customers to install an update for a flaw in its SSL VPN. The flaw could let someone skip the extra login check known as multi-factor authentication, but only where SAML sign-in is enabled and the attacker already holds valid login details for another method. The company has investigated a report of possible real-world exploitation, though the details do not say who is behind it or how widely it has been used.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Upgrade affected SonicOS appliances to the fixed release for their generation: 7.3.4-7013 or later for Gen7, or 8.2.3-8015 or later for Gen8.
- Confirm which appliance generation you run before choosing the matching fixed release.
- Review which authentication methods are enabled on SSLVPN and check whether SAML is in use.
- Check VPN login activity for anything unusual while completing the upgrade.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies
Products