SonicOS vulnerabilities affect physical and virtual appliances, with CVSS scores reaching 8.8. The company recommends updating affected firmware.
SonicWall has issued a security alert regarding multiple vulnerabilities identified in SonicOS, the operating system powering its firewalls. The flaws affect Gen7 and Gen8 devices and include issues classified as high and medium severity.
The company recommends that organizations and network administrators update affected devices as soon as possible.
Which SonicOS Versions Are Vulnerable?
According to SonicWall, the advisory covers physical and virtual firewalls running the following versions:
- Gen7: SonicOS 7.3.3-7015 and earlier.
- Gen8: SonicOS 8.2.2-8015 and earlier.
To address these issues, the company recommends installing SonicOS 7.3.4-7015 on Gen7 devices and SonicOS 8.2.3-8015 on Gen8 devices.
Version 7.3.4-7013, released on October 20, already included security fixes. However, the 7.3.4-7015 update, released on November 5, introduced additional changes related to eMudhra certificates.
Meanwhile, SonicOS 8.2.3-8015 for Gen8 devices is scheduled for release today, Friday, November 6.
Have These Vulnerabilities Been Exploited in Attacks?
So far, the advisory reviewed does not confirm active exploitation of these vulnerabilities or provide sufficient technical details to determine how each flaw could be exploited.
CVE identifiers were also expected to be disclosed in the full security advisory.
That doesn’t make the updates any less important. Firewalls are essential components of corporate network protection, and leaving known vulnerabilities unpatched can increase an organization’s exposure to potential threats.
SonicWall advises customers to check their installed firmware versions, apply the recommended updates, and monitor the publication of the full technical advisory.
For anyone managing SonicWall environments, the message is simple: this is one update that shouldn’t be left sitting on the to-do list.
