{"id":"CVE-2024-40766","kind":"vulnerability","aliases":["CVE-2024-40766"],"related":[],"title":"An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially…","description":"An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.","summary":"SonicWall SonicOS firewalls contain an improper access control flaw that lets an attacker reach resources they should not, and can crash the firewall under certain conditions. CISA lists it as actively exploited in the wild, with ransomware use noted in the sources.","severity":"critical","cvss":9.8,"epss":null,"exploited":true,"exploited_at":"2024-09-09T00:00:00+00:00","products":[{"name":"sonicwall sonicos","fixed":["5.9.2.14-13o"],"affected":"< 5.9.2.14-13o","ecosystem":"vendor"},{"name":"sonicwall sonicos","fixed":["6.5.2.8-2n"],"affected":"< 6.5.2.8-2n","ecosystem":"vendor"},{"name":"sonicwall sonicos","fixed":["6.5.4.15.116n"],"affected":"< 6.5.4.15.116n","ecosystem":"vendor"},{"name":"sonicwall sonicos","fixed":[],"affected":"<= 7.0.1-5035","ecosystem":"vendor"},{"name":"SonicWall SonicOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","firewall","infrastructure","ransomware","self-hosted","sonicos","sonicwall"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the vendor mitigation per SonicWall's advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action). Fixed version: unknown","status":"open","published_at":"2024-08-23T07:15:03+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:58:14+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T20:58:14Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigation per SonicWall's advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action). Fixed version: unknown","reach":"network","impact":"high","summary":"SonicWall SonicOS firewalls contain an improper access control flaw that lets an attacker reach resources they should not, and can crash the firewall under certain conditions. CISA lists it as actively exploited in the wild, with ransomware use noted in the sources.","category":"infrastructure","who_cares":["sonicwall","sonicos","firewall","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker gains unauthorized access to resources or crashes the firewall","analyst_note":"Find the SonicWall advisory for CVE-2024-40766 to get affected and fixed SonicOS versions, the vendor mitigation steps, and the specific conditions for the crash and access bypass.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000482,"input_tokens":2824,"output_tokens":399,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':17A,20A '-40766':18A,21A '-5035':132C '5':118C '6':121C '7':127C '7.0.1':131C 'access':3A,14A,47B,85C,96C,102C 'activ':71B 'affect':114C 'attack':53B 'caus':107C 'certain':65B 'cisa':67B 'condit':66B,106C 'contain':44B 'control':4A,48B,86C 'crash':61B,111C 'cve':16A,19A 'devic':122C,128C 'exploit':32B,72B 'firewal':33B,43B,63B,109C,116C 'flaw':49B 'gen':117C,120C,126C 'host':38B 'identifi':8A,90C 'improp':2A,46B,84C 'infrastructur':34B 'issu':113C 'lead':98C 'let':51B 'list':68B 'manag':13A,95C 'note':79B 'older':134C 'potenti':15A,97C 'ransomwar':35B,77B 'reach':54B 'resourc':55B,101C 'run':129C 'self':37B 'self-host':36B 'sonico':12A,39B,42B,94C,130C 'sonicos':23A,25A,27A,29A,31A 'sonicwal':11A,40B,41B,93C,115C 'sonicwall':22A,24A,26A,28A,30A 'sourc':82B 'specif':105C 'unauthor':100C 'use':78B 'version':135C 'vulner':5A,87C 'well':124C 'wild':75B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-08-23T07:15:03+00:00","kev":{"dateAdded":"2024-09-09","dueDate":"2024-09-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-40766","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40766","severity":null,"published_at":"2024-09-09T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T20:35:33+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-40766","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40766","severity":null,"published_at":"2024-08-23T07:15:03+00:00","modified_at":"2026-09-21T21:17:02+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}