CVE-2024-40766CRITICAL· 9.8MITRENVD대응게시일: 2024. 08. 23.수정일: 2025. 10. 31.CNA: PSIRT@sonicwall.comAnalyzed
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized
위협 신호 · CVSS · EPSS · KEV
즉시 패치· 실측 악용 확인 · KEV 등재
CVSS
9.8critical
이론적 심각도 점수
EPSS
18.2%상위 3.1%
30일 내 악용 확률 예측
KEV
등재됨등재일 2024. 09. 09.
패치 기한 2024. 09. 30.
권장 대응 기한3일 이내+ 침해 포렌식CISA SSVC 기준
즉시 패치 + 침해 여부 포렌식 분석
KEV 악용자동화 가능완전 장악외부 노출· KEV 등재 · 자동화 가능 · 완전 장악 · 외부 노출
CVSS 벡터 · 메트릭
악용 경로
공격 벡터네트워크
공격 복잡도낮음
필요 권한불필요
사용자 상호작용불필요
범위불변
영향
기밀성 영향높음
무결성 영향높음
가용성 영향높음
버전별 점수
CVSS 3.19.8CRITICAL· 악용성 3.9· 영향도 5.9
CVSS 3.19.3CRITICAL· 악용성 3.9· 영향도 4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H약점 (CWE)
- CWE-284
부적절한 접근 제어 — 접근 통제가 미흡해 무단 접근 허용.
상세 설명
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
AI 심층 분석
공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.
영향받는 제품·버전
- sonicwall sonicos< 5.9.2.14-13oother
- sonicwall sohoother
- sonicwall sonicos< 6.5.2.8-2nother
- sonicwall nssp_12400other
- sonicwall nssp_12800other
- sonicwall sm9800other
- sonicwall sonicos< 6.5.4.15.116nother
- sonicwall nsa_2650other
- sonicwall nsa_3600other
- sonicwall nsa_3650other
- sonicwall nsa_4600other
- sonicwall nsa_4650other
- sonicwall nsa_5600other
- sonicwall nsa_5650other
- sonicwall nsa_6600other
- sonicwall nsa_6650other
- sonicwall sm_9200other
- sonicwall sm_9250other
- sonicwall sm_9400other
- sonicwall sm_9450other
- sonicwall sm_9600other
- sonicwall sm_9650other
- sonicwall soho_250other
- sonicwall soho_250wother
- sonicwall sohowother
- sonicwall tz_300other
- sonicwall tz_300pother
- sonicwall tz_300wother
- sonicwall tz_350other
- sonicwall tz_350wother
- sonicwall tz_400other
- sonicwall tz_400wother
- sonicwall tz_500other
- sonicwall tz_500wother
- sonicwall tz_600other
- sonicwall tz_600pother
- sonicwall sonicos< 7.0.1-5035other
- sonicwall nsa_2700other
- sonicwall nsa_3700other
- sonicwall nsa_4700other
- sonicwall nsa_5700other
- sonicwall nsa_6700other
- sonicwall nssp_10700other
- sonicwall nssp_11700other
- sonicwall nssp_13700other
- sonicwall tz270other
- sonicwall tz270wother
- sonicwall tz370other
- sonicwall tz370wother
- sonicwall tz470other
- sonicwall tz470wother
- sonicwall tz570other
- sonicwall tz570pother
- sonicwall tz570wother
- sonicwall tz670other
영향받는 구성 (CPE) 52
- sonicwall sonicos< 5.9.2.14-13ocpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
- sonicwall sohocpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*
- sonicwall nssp_12400cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*
- sonicwall nssp_12800cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*
- sonicwall sm9800cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*
- sonicwall nsa_2650cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*
- sonicwall nsa_3600cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*
- sonicwall nsa_3650cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*
- sonicwall nsa_4600cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*
- sonicwall nsa_4650cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*
- sonicwall nsa_5600cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*
- sonicwall nsa_5650cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*
- sonicwall nsa_6600cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*
- sonicwall nsa_6650cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*
- sonicwall sm_9200cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*
- sonicwall sm_9250cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*
- sonicwall sm_9400cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*
- sonicwall sm_9450cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*
- sonicwall sm_9600cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*
- sonicwall sm_9650cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*
- sonicwall soho_250cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*
- sonicwall soho_250wcpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*
- sonicwall sohowcpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*
- sonicwall tz_300cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*
- sonicwall tz_300pcpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*
- sonicwall tz_300wcpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*
- sonicwall tz_350cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*
- sonicwall tz_350wcpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*
- sonicwall tz_400cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*
- sonicwall tz_400wcpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*
- sonicwall tz_500cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*
- sonicwall tz_500wcpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*
- sonicwall tz_600cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*
- sonicwall tz_600pcpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*
- sonicwall nsa_2700cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*
- sonicwall nsa_3700cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*
- sonicwall nsa_4700cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*
- sonicwall nsa_5700cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*
- sonicwall nsa_6700cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*
- sonicwall nssp_10700cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*
- sonicwall nssp_11700cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*
- sonicwall nssp_13700cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*
- sonicwall tz270cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*
- sonicwall tz270wcpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*
- sonicwall tz370cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*
- sonicwall tz370wcpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*
- sonicwall tz470cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*
- sonicwall tz470wcpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*
- sonicwall tz570cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*
- sonicwall tz570pcpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*
- sonicwall tz570wcpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*
- sonicwall tz670cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*
참고 자료 2
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40766US Government Resource
링크 내용 불러오는 중…