Vulnerability-Lookup

BDU:2025-00223 (CVE-2024-12802)

Vulnerability from fstec – Published: 2025-01-13 – Updated: 2026-05-25 – View on bdu.fstec.ru Exploit exists Yes Fixed

Title

Уязвимость реализации технологии удаленного доступа SSL VPN операционных систем SonicOS, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость реализации технологии удаленного доступа SSL VPN операционных систем SonicOS связана с обходом аутентификации в силу исходной ошибки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии

Severity

9.4 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:N

9.1 (Critical) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authentication bypass

Incidents

Yes

Remediation

Software update

CWE

CWE-305 - Обход аутентификации в силу исходной ошибки

Aliases

CVE-2024-12802

References

2 references

URL
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001
https://reliaquest.com/blog/threat-spotlight-vpn-exploitation-when-patched-does…

Impacted products

1 product from 1 vendor

Vendors

SonicWall

Products

SonicOS

Versions

до 6.5.5.1-6n (SonicOS), до 8.0.0-8037 (SonicOS), до 7.0.1-5165 (SonicOS), до 7.1.3-7015 (SonicOS), до 6.5.4.4-44v-21-2472 (SonicOS)

Product types

Operating system

Platforms

SonicWall SonicOS до 6.5.5.1-6n SOHO W, SonicWall SonicOS до 6.5.5.1-6n TZ 300, SonicWall SonicOS до 6.5.5.1-6n TZ 300W, SonicWall SonicOS до 6.5.5.1-6n TZ 400, SonicWall SonicOS до 6.5.5.1-6n TZ 400W, SonicWall SonicOS до 6.5.5.1-6n TZ 500, SonicWall SonicOS до 6.5.5.1-6n TZ 500W, SonicWall SonicOS до 6.5.5.1-6n TZ 600, SonicWall SonicOS до 6.5.5.1-6n NSA 2650, SonicWall SonicOS до 6.5.5.1-6n NSA 3600, SonicWall SonicOS до 6.5.5.1-6n NSA 3650, SonicWall SonicOS до 6.5.5.1-6n NSA 4600, SonicWall SonicOS до 6.5.5.1-6n NSA 4650, SonicWall SonicOS до 6.5.5.1-6n NSA 5600, SonicWall SonicOS до 6.5.5.1-6n NSA 5650, SonicWall SonicOS до 6.5.5.1-6n NSA 6600, SonicWall SonicOS до 6.5.5.1-6n NSA 6650, SonicWall SonicOS до 6.5.5.1-6n SM 9200, SonicWall SonicOS до 6.5.5.1-6n SM 9400, SonicWall SonicOS до 6.5.5.1-6n SM 9450, SonicWall SonicOS до 6.5.5.1-6n SM 9600, SonicWall SonicOS до 6.5.5.1-6n SM 9650, SonicWall SonicOS до 6.5.5.1-6n TZ 300P, SonicWall SonicOS до 6.5.5.1-6n TZ 600P, SonicWall SonicOS до 6.5.5.1-6n SOHO 250, SonicWall SonicOS до 6.5.5.1-6n SOHO 250W, SonicWall SonicOS до 6.5.5.1-6n TZ 350, SonicWall SonicOS до 6.5.5.1-6n TZ 350W, SonicWall SonicOS до 8.0.0-8037 TZ80, SonicWall SonicOS до 7.0.1-5165 TZ270, SonicWall SonicOS до 7.0.1-5165 TZ270W, SonicWall SonicOS до 7.0.1-5165 TZ370, SonicWall SonicOS до 7.0.1-5165 TZ370W, SonicWall SonicOS до 7.0.1-5165 TZ470, SonicWall SonicOS до 7.0.1-5165 TZ470W, SonicWall SonicOS до 7.0.1-5165 TZ570, SonicWall SonicOS до 7.1.3-7015 NSv 270, SonicWall SonicOS до 7.1.3-7015 NSv 470, SonicWall SonicOS до 7.1.3-7015 NSv 870, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 10, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 25, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 50, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 100, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 200, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 300, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 400, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 800, SonicWall SonicOS до 6.5.4.4-44v-21-2472 NSv 1600, SonicWall SonicOS до 7.0.1-5165 TZ570P, SonicWall SonicOS до 7.0.1-5165 TZ670, SonicWall SonicOS до 7.0.1-5165 NSa 2700, SonicWall SonicOS до 7.0.1-5165 NSa 3700, SonicWall SonicOS до 7.0.1-5165 NSa 4700, SonicWall SonicOS до 7.0.1-5165 NSa 5700, SonicWall SonicOS до 7.0.1-5165 NSa 6700, SonicWall SonicOS до 7.0.1-5165 NSsp 10700, SonicWall SonicOS до 7.0.1-5165 NSsp 11700, SonicWall SonicOS до 7.0.1-5165 NSsp 13700, SonicWall SonicOS до 7.0.1-5165 NSsp 15700

Mitigations

Использование рекомендаций: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "SonicWall",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 6.5.5.1-6n (SonicOS), \u0434\u043e 8.0.0-8037 (SonicOS), \u0434\u043e 7.0.1-5165 (SonicOS), \u0434\u043e 7.1.3-7015 (SonicOS), \u0434\u043e 6.5.4.4-44v-21-2472 (SonicOS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.01.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "25.05.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.01.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-00223",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-12802",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "SonicOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SOHO W, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 300, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 300W, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 400, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 400W, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 500, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 500W, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 2650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 3600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 3650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 4600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 4650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 5600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 5650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 6600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n NSA 6650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SM 9200, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SM 9400, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SM 9450, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SM 9600, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SM 9650, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 300P, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 600P, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SOHO 250, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n SOHO 250W, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 350, SonicWall SonicOS \u0434\u043e 6.5.5.1-6n TZ 350W, SonicWall SonicOS \u0434\u043e 8.0.0-8037 TZ80, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ270, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ270W, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ370, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ370W, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ470, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ470W, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ570, SonicWall SonicOS \u0434\u043e 7.1.3-7015 NSv 270, SonicWall SonicOS \u0434\u043e 7.1.3-7015 NSv 470, SonicWall SonicOS \u0434\u043e 7.1.3-7015 NSv 870, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 10, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 25, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 50, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 100, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 200, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 300, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 400, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 800, SonicWall SonicOS \u0434\u043e 6.5.4.4-44v-21-2472 NSv 1600, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ570P, SonicWall SonicOS \u0434\u043e 7.0.1-5165 TZ670, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSa 2700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSa 3700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSa 4700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSa 5700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSa 6700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSsp 10700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSsp 11700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSsp 13700, SonicWall SonicOS \u0434\u043e 7.0.1-5165 NSsp 15700",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SSL VPN \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0438\u043b\u0443 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 (CWE-305)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SSL VPN \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c SonicOS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0438\u043b\u0443 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001\nhttps://reliaquest.com/blog/threat-spotlight-vpn-exploitation-when-patched-doesnt-mean-protected/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-305",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,4)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,1)"
}

CVE-2024-12802 (GCVE-0-2024-12802)

Vulnerability from cvelistv5 – Published: 2025-01-09 09:08 – Updated: 2026-05-22 03:55

Summary

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-21 00:00 UTC

CWE

CWE-305 - Authentication Bypass by Primary Weakness

Assigner

sonicwall mitre root

References

1 reference

URL	Tags
https://psirt.global.sonicwall.com/vuln-detail/SN…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
SonicWall	SonicOS	Affected: 6.5.4.4-44v-21-2457 and older versions Affected: 6.5.4.15-117n and older versions Affected: 7.0.1-5161 and older versions Affected: 7.1.1-7058 and older versions Affected: 7.1.2-7019 Affected: 8.0.0-8035

Date Public

2025-01-08 07:16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-12802",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-21T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T03:55:48.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Gen6 NSv",
            "Gen6 Hardware",
            "Gen7 Hardware",
            "Gen7 NSv",
            "TZ80"
          ],
          "product": "SonicOS",
          "vendor": "SonicWall",
          "versions": [
            {
              "status": "affected",
              "version": "6.5.4.4-44v-21-2457 and older versions"
            },
            {
              "status": "affected",
              "version": "6.5.4.15-117n and older versions"
            },
            {
              "status": "affected",
              "version": "7.0.1-5161 and older versions"
            },
            {
              "status": "affected",
              "version": "7.1.1-7058 and older versions"
            },
            {
              "status": "affected",
              "version": "7.1.2-7019"
            },
            {
              "status": "affected",
              "version": "8.0.0-8035"
            }
          ]
        }
      ],
      "datePublic": "2025-01-08T07:16:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.\u003c/span\u003e"
            }
          ],
          "value": "SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-305",
              "description": "CWE-305 Authentication Bypass by Primary Weakness",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-09T09:08:26.012Z",
        "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
        "shortName": "sonicwall"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001"
        }
      ],
      "source": {
        "advisory": "SNWLID-2025-0001",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
    "assignerShortName": "sonicwall",
    "cveId": "CVE-2024-12802",
    "datePublished": "2025-01-09T09:08:26.012Z",
    "dateReserved": "2024-12-19T16:22:43.405Z",
    "dateUpdated": "2026-05-22T03:55:48.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2025-00223 (CVE-2024-12802)

CVE-2024-12802 (GCVE-0-2024-12802)

Tags

Sightings

Nomenclature

Related by attack behaviour