CVE-2024-12802

Summary

CVE-2024-12802 is a vulnerability affecting SonicWALL SSL-VPNs when integrated with Microsoft Active Directory. The issue arises due to the separate handling of User Principal Names (UPN) and Security Account Manager (SAM) account names. This configuration quirk allows Multi-Factor Authentication (MFA) to be configured independently for each login method, potentially enabling attackers to bypass MFA by exploiting the alternative account name. This could result in unauthorized access to SSL-VPN resources. SonicWALL urges users to update their SSL-VPN software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.