Vulnpedia
← All CVEs

CVE-2024-40766

CRITICAL 9.3 KNOWN EXPLOITED RANSOMWARE ALL-YEARS

Published 2024-08-23 · Last modified 2026-09-21 · sonicwall · NVD: Analyzed

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2024-09-09, linked to ransomware campaigns. Patch or mitigate now.

Exploitation likelihood

18.4%chance of exploitation in 30 days · 97th percentile

● In CISA KEV (2024-09-09)○ Catalogued PoC◆ SSVC: exploitation active, automatable yes

Impact if exploited

9.3CVSS 3.1 · CRITICAL · ADP

  • ConfidentialityHigh
  • IntegrityNone
  • AvailabilityLow

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Sonicwall

Products Sonicos Soho Nssp 12400 Nssp 12800 Sm9800 Nsa 2650 Nsa 3600 Nsa 3650 Nsa 4600 Nsa 4650 Nsa 5600 Nsa 5650 Nsa 6600 Nsa 6650 Sm 9200 Sm 9250 Sm 9400 Sm 9450 Sm 9600 Sm 9650 Soho 250 Soho 250w Sohow Tz 300 Tz 300p Tz 300w Tz 350 Tz 350w Tz 400 Tz 400w Tz 500 Tz 500w Tz 600 Tz 600p Nsa 2700 Nsa 3700 Nsa 4700 Nsa 5700 Nsa 6700 Nssp 10700

Weakness (CWE)

  • CWE-284: Improper Access Control

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

References and research data (JSON)

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

56 more source reports

Known Affected Software Configurations

VendorProductVersion range
SonicwallSonicos< 5.9.2.14-13o
SonicwallSonicos< 6.5.2.8-2n
SonicwallSonicos< 6.5.4.15.116n
SonicwallSonicos≤ 7.0.1-5035

All CVSS metrics

  • CRITICAL 9.3 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
  • CRITICAL 9.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CRITICAL 9.3 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS