Paper/Archive/CVE-2024-12802

CVE-2024-12802

SonicWall SonicOS — SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Se…

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 41.9.419 × 208.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.

Affected

ProductAffectedFixed inSource

SonicOS6.5.4.4-44v-21-2457 and older versions–CNA

SonicOS6.5.4.15-117n and older versions–CNA

SonicOS7.0.1-5161 and older versions–CNA

SonicOS7.1.1-7058 and older versions–CNA

SonicOS7.1.2-7019–CNA

SonicOS8.0.0-8035–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001