
A recently discovered bug in SonicWall SonicOS firewall instances is being used in ransomware attacks, multiple researchers have confirmed.
SonicWall recently reported finding, and patching, an improper access control vulnerability affecting its Gen 5, Gen 6, and Gen 7 firewalls, as well as the firewalls’ SSLVPN feature. The bug is tracked as CVE-2024-40766, and does not yet have a severity score assigned.