← Database

CVE-2024-40766

CRITICAL CVSS: 9.8 Published: 2024-08-23 Modified: 2026-06-17

Description

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Affected Platforms

Sonicwall Nsa 6700Sonicwall Tz270Sonicwall Nsa 4650Sonicwall Tz 600Sonicwall Sm 9600Sonicwall Nsa 3650Sonicwall Tz 300PSonicwall Sm 9200Sonicwall Tz 400WSonicwall Nsa 5600

Weakness Type

CWE-284, NVD-CWE-noinfo

References