SonicWall SonicOS Improper Access Control Vulnerability

A vulnerability exists in the access control mechanism of SonicOS, potentially allowing certain management interface functions to be accessed under specific conditions. This issue affects multiple generations of SonicWall firewalls and NSv platforms, with varying vulnerable versions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to management interface functions, allowing for potentially privileged actions or configurations to be altered.

Remediation

Administrators are advised to disable HTTP or HTTPS-based firewall management and SSL-VPN access on all interfaces, restricting management access to SSH only. Once the vulnerability has been addressed, SonicWall firewalls can be updated to version 6.5.5.2-28n for Gen6 hardware, version 7.3.2-7010 for Gen7 firewalls and NSv platforms, or version 8.2.0-8009 for Gen8 firewalls.