SonicWall SonicOS Post-Authentication Format String Vulnerability Leading to Firewall Crash

A post-authentication format string vulnerability has been identified in SonicWall SonicOS. This vulnerability allows remote attackers to cause a crash on the affected firewall. It is present in multiple Gen7 and Gen8 hardware and virtual firewalls, specifically in certain models within the TZ and NSa series, as well as in the NSv virtual firewalls. The vulnerability affects SonicOS versions 7.0.1-5169 and older, as well as 8.1.0-8017 and older.

Impact

Exploitation of this vulnerability leads to a crash of the firewall, causing a denial of service condition.

Remediation

Users can upgrade to SonicOS versions 7.3.2-7010 or higher, or 8.2.0-8009 or higher, depending on their current version and platform.