SonicWall firewalls hit by active mass exploitation of suspected zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-20016 | Unauthenticated SQL Injection in SonicWall SMA100 SSL VPN | 9.8 | 40% | KEVRansomware | KEV |
| CVE-2023-44221 | OS Command Injection in SonicWall SMA100 SSL-VPN Management Interface | 7.2 | 76% | KEV | KEV |
| CVE-2024-53704 | Authentication Bypass in SonicWall SonicOS SSLVPN | 9.8 | 95% | KEVRansomware | KEV |
From the original article
4 min read at cyberscoop.com
About 20 organizations have been impacted and the pace of attacks is rising. Threat researchers and SonicWall are scrambling to determine the root cause. SonicWall's headquarters in Milpitas, California.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.