Certificate Requirement Circumvention Vulnerability in SonicWall SMA100 SSLVPN Firmware
CVE-2024-45319

Currently unrated

Key Information:

Vendor
Sonicwall
Status
Sma100
Vendor
CVE Published:
5 December 2024

Summary

A vulnerability in the SonicWall SMA100 SSLVPN

firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.

Affected Version(s)

SMA100 Linux 10.2.1.13-72sv and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alain Mowat of Orange Cyberdefense, Switzerland.
.