SonicWall SonicOS Post-Authentication NULL Pointer Dereference Vulnerability Allowing Firewall Crash

A post-authentication NULL Pointer Dereference vulnerability has been identified in SonicWall SonicOS. This vulnerability allows remote attackers to cause a crash on the affected firewall. It is present in multiple Gen7 and Gen8 hardware and virtual firewalls, specifically in certain models within the TZ and NSa series, as well as in the NSv virtual firewalls. The vulnerability affects versions 7.0.1-5169 and older, as well as 8.1.0-8017 and older.

Impact

Exploitation of this vulnerability leads to a crash of the firewall, causing a denial of service.

Remediation

Users can upgrade to SonicOS version 7.3.2-7010 or higher for Gen7 firewalls, and version 8.2.0-8009 or higher for Gen8 firewalls.