Patch Ticker

SonicOS SSLVPN SAML authentication bypass flaw

Company VPN firewalls can be entered past login checks!

Summary

A flaw in the SonicOS SSL VPN service lets a user with valid credentials for another login method bypass SAML authentication and SAML-enforced multi-factor authentication (MFA). SonicWall firewalls and virtual appliances with SAML enabled for SSL VPN logins are affected, and the flaw has been exploited in attacks.

Affected when

  • SAML enabled for SSLVPN logins
  • a user with valid credentials for another login method

What to do

Update Gen7 to 7.3.4-7013 and Gen8 to 8.2.3-8015 or higher. If you cannot upgrade and use SAML, disable or delete active LDAP, RADIUS, and TACACS+ authentication servers.

Update to at least the version for your product:

  • SonicWall Gen7 7.3.4-7013 or later
  • SonicWall Gen8 8.2.3-8015 or later

Update these devices now!

  • SonicWall TZ 270
  • SonicWall TZ 270W
  • SonicWall TZ 370
  • SonicWall TZ 370W
  • SonicWall TZ 470
  • SonicWall TZ 470W
  • SonicWall TZ 570
  • SonicWall TZ 570W
  • SonicWall TZ 570P
  • SonicWall TZ 670
  • SonicWall NSa 2700
  • SonicWall NSa 3700
  • SonicWall NSa 4700
  • SonicWall NSa 5700
  • SonicWall NSa 6700
  • SonicWall NSsp 10700
  • SonicWall NSsp 11700
  • SonicWall NSsp 13700
  • SonicWall NSsp 15700
  • SonicWall NSv 270
  • SonicWall NSv 470
  • SonicWall NSv 870
  • SonicWall TZ 80
  • SonicWall TZ 280
  • SonicWall TZ 280W
  • SonicWall TZ 380
  • SonicWall TZ 380W
  • SonicWall TZ 480
  • SonicWall TZ 580
  • SonicWall TZ 680
  • SonicWall NSa 2800
  • SonicWall NSa 3800
  • SonicWall NSa 4800
  • SonicWall NSa 5800
  • SonicWall NSv XS
  • SonicWall NSv S
  • SonicWall NSv M
  • SonicWall NSv L

Fixed in version 7.3.4-7013.

Products and platforms

  • SonicOS

CVE IDs

Sources

Times

First published

First seen