SonicWall Security Snafu: New Vulnerabilities Exploited in the Wild!
SonicWall is in the spotlight again as vulnerabilities CVE-2023-44221 and CVE-2024-38475 make their grand debut in CISA’s Known Exploited Vulnerabilities catalog. These flaws allow cyber attackers to channel their inner villain, exploiting SonicWall products and Apache HTTP Server. Stay vigilant, folks!
Hot Take:
Looks like SonicWall and Apache are having a less-than-ideal week. Who knew that a “nobody” user could wreak such havoc in the cybersecurity world? Maybe it’s time to call in the cyber exterminators because these vulnerabilities are running amok like digital cockroaches!
Key Points:
- SonicWall hit with two new vulnerabilities, one of which is being actively exploited.
- CVE-2023-44221 allows post-authentication command injection in SonicWall’s SMA SSL-VPN.
- CVE-2024-38475 is a pre-authentication file read flaw in Apache HTTP Server.
- Exploits are now confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA).
- SonicWall and Apache are working on patches and advisories to counter these threats.
Already a member? Log in here