SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day

Source: The Hacker News | Added:

SonicWall has confirmed that the recent attacks on its Gen 7 and newer firewalls with SSL VPN are linked to a previously patched vulnerability rather than a new zero-day exploit. The company identified a strong correlation with threat activity associated with CVE-2024-40766 and password reuse issues.

---

Impact: Gen 7 and newer SonicWall firewalls with SSL VPN enabled

In the Wild: Yes

Age: Recently disclosed

Remediation: Apply the latest patches and enforce strong password policies

Read Full Original Article →