References https://www.tenablecloud.cn/plugins/nessus/206801 https://www.venustech.com.cn/new_type/aqtg/20240827/27829.html https://www.anquanke.com/post/id/299527 https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/information_security_information_sharing_1292/ https://www.gm7.org/archives/97591 https://cn.t00ls.com/articles-72369.html https://www.chnhonker.com/4001.html https://www.ithome.com.tw/news/164920 https://starmap.dbappsecurity.com.cn/info/7133 https://www.sonicwall.com/support/notices/product-notice-improper-access-control-vulnerability-in-sonicos/kA1VN0000000Tq10AE https://www.cisecurity.org/advisory/a-vulnerability-in-sonicwall-sonicos-management-access-and-sslvpn-could-allow-for-unauthorized-access_2024-097 https://cyberscoop.com/sonicwall-firewall-attacks-old-vulnerability/ https://www.vc3.com/blog/improper-access-control-vulnerability-in-sonicwall-firewall-products https://blackswan-cybersecurity.com/critical-vulnerability-in-sonicwall-firewalls-allows-unauthorized-access/ https://www.reddit.com/r/sonicwall/comments/1eyuu9x/sonicwall_remote_access_vulnerability/?tl=zh-hans https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004 https://bishopfox.com/blog/its-2024-and-over-178000-sonicwall-firewalls-are-publicly-exploitable https://www.cybersecuritydive.com/news/vulnerability-sonicwall-firewalls-exploitation/740345/ https://cdn.isc.360.com/isc-cxo/2024_Vulnerability_Report.pdf https://www.163.com/dy/article/KHL7K8NU0538B1YX.html
Related VulnerabilitiesPoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassPoCCVE-2022-3236: Sophos Firewall <= 19.0 MR1 - Remote Code ExecutionPoCwp-all-in-one-wp-security-and-firewall-fpd: All In One WP Security & Firewall - Full Path DisclosureCisco Secure Firewall Adaptive Security Appliance 缓冲区溢出漏洞firewall-password-leak: 防火墙硬编码漏洞Cisco Secure Firewall Management Center和Cisco Secure Firewall Threat Defense 操作系统命令注入漏洞PoCCVE-2012-4889: ManageEngine Firewall Analyzer 7.2 - Cross-Site ScriptingPoCCVE-2015-7780: ManageEngine Firewall Analyzer <8.0 - Local File InclusionPoCCVE-2019-19411: Huawei Firewall - Local File InclusionPoCCVE-2019-7481: SonicWall SRA 4600 VPN - SQL InjectionPoCCVE-2021-20031: SonicWall SonicOS 7.0 - Open RedirectPoCCVE-2021-20038: SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution