Detections
Analytics
SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2025-0003)
critical Nessus Plugin ID 232198
Synopsis
The remote host is affected by multiple vulnerabilities.Description
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities:- Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass. (CVE-2024-40762)
- An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. (CVE-2024-53704)
- A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall. (CVE-2024-53705)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to the relevant fixed version referenced in the vendor security advisory.See Also
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
Plugin Details
Severity: Critical
ID: 232198
File Name: sonicwall_SNWLID-2025-0003.nasl
Version: 1.1
Type: combined
Family: Firewalls
Published: 3/6/2025
Updated: 3/6/2025
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.0
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2024-53704
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/o:sonicwall:sonicos
Required KB Items: installed_sw/SonicWall SonicOS
Patch Publication Date: 1/7/2025
Vulnerability Publication Date: 1/7/2025
CISA Known Exploited Vulnerability Due Dates: 3/11/2025