SonicWall SonicOS Post-Authentication Path Traversal Vulnerability

A post-authentication path traversal vulnerability exists in SonicWall SonicOS, allowing attackers to access and interact with typically restricted services. This vulnerability affects several generations of SonicWall firewalls and NSv platforms, with specific version ranges vulnerable.

Impact

Exploitation of this vulnerability could lead to unauthorized access to restricted services, potentially allowing for further exploitation or manipulation of the device or network.

Remediation

Administrators are advised to disable HTTP or HTTPS-based firewall management and SSL-VPN access on all interfaces, restricting management access to SSH only. Once the vulnerability has been addressed, SonicWall PSIRT recommends consulting the official SonicWall support channels for guidance on re-enabling management access.