CVE-2024-40766

This vulnerability is like leaving a door to your building’s office unlocked but with a “partial” lock—wrong people may be able to get access to internal systems they shouldn’t. Depending on how it’s used, it can also cause the firewall to crash, disrupting your network. Because it targets the firewall’s management access, it’s particularly serious.

This matters to you if you use or operate SonicWall firewall devices running SonicOS management. It affects SonicWall Firewall Gen 5 and Gen 6 devices, and SonicWall Gen 7 devices running SonicOS 7.0.1-5035 and older versions. If your business relies on these firewalls to secure your network, treat this as urgent.

This is a RED situation because attackers are already exploiting it in the real world (it is listed in CISA KEV and press reports indicate it is being used in the wild). With ransomware-linked exploitation reported and a high estimated likelihood of exploitation in the next 30 days, you should not wait for the next routine maintenance window. Move to remediation immediately.