Our takeSonicWall warns that two zero-days in its SMA1000 appliances are already chained in RCE attacks. Patch immediately if you run them.Cyber Resilience desk
Sources (1)
- bleeping · bleeping
What this means for you — Security leader:Review and apply SonicWall's SMA1000 advisory; prioritize the two zero-days and any available mitigations or patches. Monitor for exploitation attempts in your logs.
What this means for you — Lean IT orgs:If you run a SonicWall SMA1000 appliance, check the vendor advisory right away and follow their steps to protect it or apply any fixes.
What this means for you — MSP:Audit all client SMA1000 deployments for the two actively exploited zero-days; apply SonicWall's mitigations or patches and watch for related indicators.
What this means for you — Researcher:SonicWall disclosed two SMA1000 zero-days under active exploitation in chained RCE attacks; details remain limited pending further vendor or independent analysis.