SonicWall Firewall Vulnerabilities Exploited by Ransomware | MSSP Advisory

SonicWall released firmware updates addressing three CVEs that security experts warn ransomware actors may exploit against unpatched firewalls. The vulnerabilities affect SonicWall firewall devices, which are commonly deployed at MSSP client sites and potentially in MSSP management networks. Ransomware groups historically target firewall vulnerabilities for initial network access.

SonicWall firewalls sit at network perimeters for dozens of your clients and potentially protect your own management infrastructure. Ransomware actors will weaponize these CVEs within days, turning every unpatched SonicWall into a potential breach vector that leads back to your advisory relationship.