medium6.3
CVE-2024-22395
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a …
Impact
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 200 Firmware | before 10.2.1.11-65sv |
| Sonicwall | Sma 210 Firmware | before 10.2.1.11-65sv |
| Sonicwall | Sma 400 Firmware | before 10.2.1.11-65sv |
| Sonicwall | Sma 410 Firmware | before 10.2.1.11-65sv |
| Sonicwall | Sma 500v Firmware | before 10.2.1.11-65sv |