{"cvss":9.8,"datePublished":"2024-09-09","dateUpdated":"2024-09-09","description":"SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.","dueDate":"2024-09-30","id":"CVE-2024-40766","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015; https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40766","product":"SonicOS","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"SonicWall SonicOS Improper Access Control Vulnerability","vendor":"SonicWall"}