Security Alert (A24-07-19): Multiple Vulnerabilities in SonicWall Products

Description:

SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems. An attacker could exploit these vulnerabilities by sending specially crafted requests to an affected system.

Affected Systems:

• SonicOS versions prior to 6.5.4.v-21s-RC2457, 7.0.1-5161, 7.1.1-7058, 7.1.2-7019
• SonicWall NetExtender Windows versions prior to 10.2.341

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution or denial of service on the affected system.

Recommendation:

Patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29014
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40764