SonicWall alerts: exploit found in wild for access control flaw

TLDR:

• SonicWall has issued an urgent security advisory regarding a critical access control vulnerability (CVE-2024-40766) affecting its firewall products.
• The vulnerability is potentially being exploited in the wild and affects SonicWall Firewall Gen 5, Gen 6, and Gen 7 devices running older SonicOS versions.

SonicWall has released patches to address the issue and strongly urges all customers to apply them immediately. The company also recommends implementing workarounds for those unable to patch right away, such as restricting firewall management to trusted sources and enabling Multi-Factor Authentication for SSLVPN users. Organizations using affected SonicWall products should treat this as a high-priority security issue and take prompt action to mitigate the risk of unauthorized access or system crashes.

Users are encouraged to stay vigilant and monitor their networks for any signs of suspicious activity.