Description
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SonicOS | 8.2.2-8015 and older versions | — |
| SonicWall | SonicOS | 7.3.3-7015 and older versions | — |
Advisories 2
- NCSC-2026-0471 Kwetsbaarheden verholpen in SonicOS van SonicWall NCSC-NL (Netherlands) · Nov 9, 2026
- WID-SEC-2026-4391 SonicWall SonicOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026