SonicWall SonicOS SSLVPN Null Pointer Dereference Denial-of-Service Vulnerability

A null pointer dereference vulnerability has been identified in the SonicOS SSLVPN Virtual Office interface. This vulnerability allows a remote, unauthenticated attacker to crash the firewall, potentially causing a denial-of-service condition. The issue affects SonicWall Gen7 NSv and various Gen7 Firewall models, specifically in the 7.1.x version range, as well as TZ80 users on versions through 8.0.0-8037.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the firewall to crash.

Remediation

The vulnerability can be mitigated by disabling the SSLVPN service on the firewall. For users on affected versions, upgrading to SonicOS 7.2.0-7015 or higher is recommended. TZ80 users should upgrade to version 8.0.1-8017 or higher.