SonicWall patches 11 firewall vulnerabilities

SonicWall customers are urged to download updates that fix 11 CVEs in the SonicOS working system, uncovered by Obvious Applied sciences

Alex Scroxton

Alex Scroxton,
Security Editor

Published: 22 Oct 2020 15: 15

Firewall-builder SonicWall has patched a whole of 11 Well-liked Vulnerabilities and Exposures (CVEs) disclosed in its SonicOS working system by researchers at Obvious Applied sciences, thought to be one of which has been assigned a foremost CVSS glean of 9.4.

Essentially the most foremost vulnerability, CVE-2020-5135, is a buffer overflow vulnerability in SonicOS Gen 6, variations 6.5.4.7, 6.5.1.12, 6.0.5.3 and SonicOSv 6.5.4.v. It may per chance well be frail against affected merchandise by malicious actors to cause denial of service (DoS) and enact arbitrary code.

“The examined solution uses a SSL-VPN some distance flung earn admission to service on firewalls, and customers can also be disconnected from internal networks and their workstations in case of a DoS assault,” said Obvious Applied sciences researcher Nikita Abramov, who worked on the disclosure alongside Tripwire’s Craig Young.

“If attackers location up to enact arbitrary code, they may per chance well per chance possibly also be in a blueprint to manufacture an assault and penetrate the firm’s internal networks,” said Abramov.

A 2nd vulnerability, CVE-2020-5133, changed into rated 8.2 on the CVSS matrix, and may per chance possibly enable a some distance flung, unauthenticated attacker to cause DoS assaults because of buffer overflow, ensuing in a firewall wreck. Extra failures in SonicOS may per chance possibly also be introduced about by a success exploitation of CVEs 2020-5137, 5138, 5139 and 5140, all exploitable remotely, and CVEs 2020-5134 and 5136, which are less extreme as to profit from them would require authentication.

Extra detected vulnerabilities, Obvious Applied sciences said, encompass CVE-2020-5141, which may per chance possibly enable a some distance flung, unauthenticated attacker to brute pressure a virtual support ticket identity in the SSL-VPN service; CVE-2020-5142, a sinful-living scripting (XSS) vulnerability which enables a some distance flung, unauthenticated attacker to enact arbitrary JavaScript code in the firewall SSL-VPN portal; and CVE-2020-5143, which exists in the SonicOS SSL-VPN login net page and may per chance possibly enable a some distance flung, unauthenticated attacker to earn firewall administration administrator username enumeration per the server responses.

SonicWall, which is in the abet of a fifth of gateway security appliances per IDC statistics, said that it changed into now not attentive to any of the addressed vulnerabilities having been proactively exploited by cyber criminals to this level.

Any customer utilizing an impacted product is urged to upgrade their firmware – a legitimate beef up contract is now not required to earn so.

SonicWall urged Laptop Weekly it maintains the best standards to verify the integrity of its merchandise, solutions, products and companies, technology and any connected IP and, as such, takes every disclosure or discovery very seriously.

“Right here is simplest observe for dealer-researcher collaboration in the unusual generation,” said SonicWall head of quality engineering, Aria Eslambolchizadeh.

“These kinds of commence and transparent relationships supply protection to the integrity of the rep panorama, and verify better safety from developed threats and rising vulnerabilities earlier than they impact stop customers, as changed into the case right here.”

The fleshy checklist of disclosed vulnerabilities is obtainable from SonicWall, to boot to instructions and steering on how one can update at-threat merchandise.

Issue Continues Beneath