SonicWall SonicOS Post-Authentication Out-of-Bounds Read Vulnerability Allowing Firewall Crash

A post-authentication out-of-bounds read vulnerability has been identified in SonicWall SonicOS. This vulnerability allows remote attackers to cause a crash on the affected firewall. It is present in multiple Gen7 and Gen8 hardware and virtual firewalls, specifically in certain model series. The vulnerability affects several different versions and ranges of the SonicOS software.

Impact

Exploitation of this vulnerability leads to a crash of the firewall, causing a denial of service condition.

Remediation

Users can upgrade to SonicOS versions 7.3.2-7010 or higher for Gen7 firewalls, and 8.2.0-8009 or higher for Gen8 firewalls.