Alert: Over 178,000 SonicWall Firewalls Potentially Vulnerable to Exploits – Act Now

More than 178,000 SonicWall firewalls exposed above the internet are exploitable to at least a person of the two security flaws that could be probably exploited to cause a denial-of-support (DoS) ailment and distant code execution (RCE).

“The two issues are fundamentally the same but exploitable at distinctive HTTP URI paths because of to reuse of a vulnerable code pattern,” Jon Williams, a senior security engineer at Bishop Fox, stated in a specialized investigation shared with The Hacker Information.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The vulnerabilities in issue are stated under –

• CVE-2022-22274 (CVSS score: 9.4) – A stack-based buffer overflow vulnerability in the SonicOS through HTTP ask for makes it possible for a remote, unauthenticated attacker to cause DoS or perhaps consequence in code execution in the firewall.

• CVE-2023-0656 (CVSS rating: 7.5) – A stack-based buffer overflow vulnerability in the SonicOS enables a remote, unauthenticated attacker to trigger DoS, which could end result in a crash.

Whilst there are no studies of exploitation of the flaws in the wild, a evidence-of-thought (PoC) for CVE-2023-0656 was released by the SSD Protected Disclosure group April 2023.

The cybersecurity organization uncovered that the issues could be weaponized by terrible actors to result in recurring crashes and pressure the appliance to get into upkeep mode, demanding administrative action to restore regular operation.

“Probably most astonishing was the discovery that about 146,000 publicly-available products are vulnerable to a bug that was printed nearly two many years ago,” Williams stated.

The enhancement arrives as watchTowr Labs uncovered several stack-based mostly buffer overflow flaws in the SonicOS management web interface and SSL VPN portal that could guide to a firewall crash.

To safeguard from doable threats, it is advisable to update to the last variation and be certain that the administration interface just isn’t uncovered to the internet.

Located this write-up attention-grabbing? Observe us on Twitter  and LinkedIn to study extra unique content material we article.