Description
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA100 | 10.2.1.10-62sv and earlier versions | — |
Advisories 1
- WID-SEC-2024-0467 SonicWall SMA: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Feb 22, 2024
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0001 vendor-advisory