SonicWall SMA1000 Series Improper Unicode Handling Allows TOTP Authentication Bypass

A vulnerability in SonicWall SMA1000 series appliances, specifically in versions 12.4.3-03245 and earlier, as well as 12.5.0-02283 and earlier, has been identified. This vulnerability arises from improper handling of Unicode encoding, which enables a remote authenticated SSLVPN administrator to bypass AMC TOTP authentication. Notably, this issue does not affect SSL-VPN on SonicWall firewall products.

Impact

Exploitation of this vulnerability allows for bypassing TOTP authentication, potentially leading to unauthorized access or actions that require TOTP verification.

Remediation

Users are advised to upgrade to SonicWall SMA1000 versions 12.4.3-03387 (platform-hotfix) or 12.5.0-02624 (platform-hotfix). The latest platform-hotfix can be downloaded from mysonicwall.com.