The SonicWall patched vulnerability is still used in a few ransomware attacks

Patch available for other ‘disable’ apps

Affected SonicOS versions include 5.9.2.14-12o and later, 6.5.4.14-109n and later, and 7.0.1-5035 and later, fixed in versions 5.9.2.14-13o, 6.5.4.15.116n, and 7.0 . 1-5072, respectively.

SonicWall and Arctic Wolf strongly recommend that affected users upgrade to the latest supported SonicOS firmware versions. Additionally, SonicWall’s advisory recommends that all users of Gen5 and Gen6 devices update their passwords to prevent unauthorized access. Disabling the affected services is also listed as a workaround in SonicWall’s advisory.

“To reduce the potential impact, SonicWall recommends limiting firewall management to trusted sources or disabling firewall WAN management for Internet access,” the company said. “Similarly, with SSLVPN, please ensure that access is restricted to trusted sources, or disable SSLVPN access to the Internet.”