H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-40766

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

Vulnerability
TypeVulnerability
External ID—
First seen2024-09-09
Last seen2024-09-09

Confidence

—

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productSonicWall SonicOS
Added2024-09-09
Due date2024-09-30
18 recorded

Relationships

mitigates
from Remediate CVE-2024-40766
Mitigation
related-to
to Add Malicious File to Shared Webroot
Technique
related-to
to Data Injected During Configuration
Technique
related-to
to Disable Security Software
Technique
related-to
to Embedding Scripts within Scripts
Technique
related-to
to Incomplete Data Deletion in a Multi-Tenant Environment
Technique
related-to
to Install New Service
Technique
related-to
to Install Rootkit
Technique
related-to
to Intent Spoof
Technique
related-to
to Malicious Logic Insertion
Technique
related-to
to Malicious Root Certificate
Technique
related-to
to Modification of Windows Service Configuration
Technique
related-to
to Modify Existing Service
Technique
related-to
to Modify Shared File
Technique
related-to
to Replace File Extension Handlers
Technique
related-to
to Replace Trusted Executable
Technique
related-to
to Run Software at Logon
Technique
related-to
to WebView Exposure
Technique
2 external

References

nvd
CVE-2024-40766
open
cwe
CWE-284
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance