SonicWall Security Scare: Patch Now or Face Cyber Mayhem!
CISA adds two SonicWall flaws to the Known Exploited Vulnerabilities catalog the same day proof-of-concept exploit code is published. These vulnerabilities allow remote attacks, prompting urgent patch advisories. SonicWall users, update your systems before hackers channel their inner tech comedian and make your security a punchline.
Hot Take:
Oh, SonicWall, you’ve done it again! It seems like every year, just as the weather starts warming up, so does the security drama. Two new flaws, one catalog, and a whole lot of patching. It’s almost like a cybersecurity soap opera, with more code and fewer commercials. Grab your popcorn, folks, because this show is far from over!
Key Points:
- SonicWall has two new vulnerabilities: CVE-2023-44221 and CVE-2024-38475.
- CISA added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.
- The flaws can be remotely exploited to inject OS commands and map URLs to file system locations.
- Patches for these vulnerabilities have been available since December 2023 and December 2024.
- Federal agencies have been ordered to patch these vulnerabilities by May 22.
Already a member? Log in here