Database/Firmware, BMC & network fabric
SonicWall SonicOS SSL-VPN: remote authentication bypass on firmware 7.1.1-7040
Impact
A remote attacker can, under specific conditions, get past SSL-VPN authentication on a SonicWall firewall. Where that firewall fronts the management network or out-of-band access to a GPU cluster, getting past the VPN puts the attacker on networks that are meant to be reachable only after login: BMCs, switch management, cluster control planes. The advisory does not say what the specific conditions are. Only firmware 7.1.1-7040 is affected.
Who can reach it
Remote and unauthenticated, from anyone who can reach the SSL-VPN interface, usually internet-facing.
What to do
Upgrade SonicOS off 7.1.1-7040 to the fixed release named in SNWLID-2024-0003. That is a firewall firmware upgrade and reboot, so plan a window or fail over to an HA peer. Until it is done, restrict or disable SSL-VPN.
References
Related entries
- Supermicro BMC firmware web/management service (X11/X12/X13/H12/H13/B12/B13, CMM6): An attacker who never authenticatesCVE-2024-36435 · Supermicro BMC firmware web/management service (X11/X12/X13/H12/H13/B12/B13, CMM6)Critical
- Linux kernel (drivers/infiniband/ulp/rtrs): The RTRS server builds an RDMA work request around a scatter-gather listCVE-2024-36476 · Linux kernel (drivers/infiniband/ulp/rtrs)Critical
- Linux kernel Soft-RoCE completer (rdma_rxe, rxe_comp_queue_pkt): An inbound response packet is queued to the completerCVE-2024-38544 · Linux kernel Soft-RoCE completer (rdma_rxe, rxe_comp_queue_pkt)Critical
- OpenBMC slpd-lite (Service Location Protocol daemon, UDP 427): slpd-lite is a small SLP responder that OpenBMC installsCVE-2024-41660 · OpenBMC slpd-lite (Service Location Protocol daemon, UDP 427)Critical
- Linux kernel (drivers/infiniband/core): Tearing down an iWARP connection frees the rdma_id_private whileCVE-2024-42285 · Linux kernel (drivers/infiniband/core)Critical
- Rittal IoT Interface and CMC III Processing Unit - firmware upgrade signature check: The admin web interface verifiesCVE-2024-47943 · Rittal IoT Interface and CMC III Processing Unit - firmware upgrade signature checkCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.