Skip to main content
Apexward Pulse

Cisco

SonicWall SonicOS Access Control Flaw Vulnerability

CVE-2024-40766

What this means

This is rated critical severity (9.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Sonicwall Sonicos, Sonicwall Soho and Sonicwall Nssp 12400, and 37 more are in your estate, and treat that as the priority.

Full vendor description

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Scoring and exploitation

9.8/ 10
CVSS 3.1 base scoreCritical

Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability

Longer bar: easier to attack

Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
Elevated attack likelihood (~18.4% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Yes — confirmed exploitation (US CISA )
Known
Listed product
SonicWall SonicOS

Weaknesses

CWE-284NVD-CWE-noinfo

Affected products ()

  • Sonicwall Sonicos
  • Sonicwall Soho
  • Sonicwall Nssp 12400
  • Sonicwall Nssp 12800
  • Sonicwall sm9800
  • Sonicwall Nsa 2650
  • Sonicwall Nsa 3600
  • Sonicwall Nsa 3650
  • Sonicwall Nsa 4600
  • Sonicwall Nsa 4650
  • Sonicwall Nsa 5600
  • Sonicwall Nsa 5650
  • Sonicwall Nsa 6600
  • Sonicwall Nsa 6650
  • Sonicwall Sm 9200
  • Sonicwall Sm 9250
  • Sonicwall Sm 9400
  • Sonicwall Sm 9450
  • Sonicwall Sm 9600
  • Sonicwall Sm 9650
  • Sonicwall Soho 250
  • Sonicwall Soho 250w
  • Sonicwall Sohow
  • Sonicwall Tz 300
  • Sonicwall Tz 300p
  • Sonicwall Tz 300w
  • Sonicwall Tz 350
  • Sonicwall Tz 350w
  • Sonicwall Tz 400
  • Sonicwall Tz 400w
  • Sonicwall Tz 500
  • Sonicwall Tz 500w
  • Sonicwall Tz 600
  • Sonicwall Tz 600p
  • Sonicwall Nsa 2700
  • Sonicwall Nsa 3700
  • Sonicwall Nsa 4700
  • Sonicwall Nsa 5700
  • Sonicwall Nsa 6700
  • Sonicwall Nssp 10700
Show the raw CPE strings (40)
  • cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*

Showing 25 of 40 matches from .

References

2 links from the CVE record, grouped by site; the vendor's advisory comes first.

Related feed events

  • Cisco ASA and FTD Information Disclosure Vulnerability

    Type Vulnerability

    CVE-2020-3259 is confirmed as exploited in the wild (US known-exploited catalogue) CVE-2020-3259 has an estimated ~71.8% chance of attack in 30 days (99.4th percentile) as of 2026-10-20 — probability…

    Next step: Confirm whether Cisco Secure Firewall Threat Defense is in your estate.

    Who's reporting

    1 of 3 perspectives

    Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal

    Only official coverage so far. Treat as an early signal.

    Cisco Secure Firewall Threat Defense
    CVE-2020-3259+4