Vulnerabilities

CVSS

9.3 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Risk score

100.0

Known exploited

CISA KEV

Published

2024-08-23

Status

Published

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Weaknesses

CWE-284

Coverage 1

threat-intel

CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)

This report details a significant ongoing cyber threat targeting SonicWall firewalls exploiting CVE-2024-40766, a critical access control vulnerability. Ransomware groups, notably Akira and Fog, have been actively levera…

SANS Internet Storm Center · Jun 23, 2026 Critical

CVE-2024-40766CVE-2024-12802USGBvpncredential theftransomware

All articles mentioning it

Advisories and references

• psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...