CyberSec.Space Logo
返回 CVE 浏览器

CVE-2024-40766

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-08-23
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

Affected Platforms (CPE)

💻
Sonicwall

Sonicos

< 5.9.2.14-13o< 6.5.2.8-2n< 6.5.4.15.116n<= 7.0.1-5035

References & Advisories

🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40766

相關資安分析文章

全球网络威胁情报摘要：2026 年 7 月 23 日

本期情报重点包含 CISA 将 Langflow CVE-2026-0770 远程代码执行漏洞列入 KEV 已知利用目录、Windmill CVE-2026-29059 未经身份验证路径穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持续追踪与防御建议。

2026-07-23

全球网络威胁情报摘要：2026 年 7 月 20 日

本期安全威胁情报汇整：SonicWall SMA1000 零日漏洞链利用、NGINX 正规表示式 Heap 溢出漏洞 (CVE-2026-42533)、Sandworm 子集群 UAC-0145 利用 ClickFix 的攻击活动，以及 HelloNet 透过 ViPNet DLL 侧载事件。

2026-07-20

相关漏洞威胁

CVE-2025-406017.5

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial...

CVE-2025-406009.8

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker...

CVE-2025-328187.5

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker ...

CVE-2024-407659.8

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause D...