SonicWall針對防火牆重大漏洞提出警告，已出現疑似遭到利用的跡象
支付動態 · 2024-09-09
SonicWall近期針對上個月修補的防火牆重大漏洞CVE-2024-40766提出警告，提醒用戶這項漏洞疑似被用於實際攻擊事故，要IT人員儘速採取行動
8月下旬SonicWall針對旗下防火牆作業系統SoincOS發布資安公告，指出部分防火牆設備存在重大層級漏洞CVE-2024-40766，攻擊者藉由傳送特製的呼叫可觸發漏洞，而有機會在未經授權的情下存取部分資源，甚至在特定情境下還能導致防火牆當機，CVSS風險評為9.3分，如今這項漏洞傳出已有實際攻擊行動出現。
上週末該公司再度更新公告內容，指出這項漏洞疑似被用於實際攻擊事故的情況，呼籲IT人員要儘速套用修補程式因應。不過，究竟駭客如何利用漏洞，以及受害範圍，該公司並未透露其他細節。
由於這項漏洞牽涉SSL VPN元件，又與存取控制不當有關，若是IT人員無法立即部署新版韌體，SonicWall建議可管制存取管理介面的範圍，或是停用透過網際網路及WAN存取管理介面的管道，以減少曝險。
熱門文章
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
HUIDU Invites You to Booth T70 at iGB L!VE 2026 — Let’s Ignite London This July!
HUIDU Focus
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Indiana online casino bill stalls in House committee
Regulation
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
British gambling levy rates confirmed for each vertical
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
