A day earlier, SonicWall told SMA 100 series partners and customers to either use a firewall to only allow SSL-VPN connections to the SMA appliance from known/whitelisted IPs or configure whitelist access on the SMA directly itself.
SMA 100 series administrators are advised to create specific access rules or disable Virtual Office and HTTPS administrative access from the Internet, SonicWall said Saturday. Specifically, the company said that customers may continue to use NetExtender for remote access with the SMA 100 series since that setup is not susceptible to exploitation. SonicWall additionally disclosed late Saturday that SMA 100 series products may be used safely in common deployment use cases. “No action is required from customers or partners.” It may be used with all SonicWall products,” SonicWall announced at 10:45 p.m. “While we previously communicated NetExtender 10.x as potentially having a zero-day, that has now been ruled out.
That’s in stark contrast to Friday night, when SonicWall announced that highly sophisticated threat actors attacked its internal systems by exploiting a probable zero-day flaw in both its SMA 100 and NetExtender products. The Milpitas, Calif.-based platform security vendor said late Saturday that only its SMB-oriented Secure Mobile Access (SMA) 100 series tool remains under investigation for a security flaw. SonicWall updated its guidance a day after disclosing a sophisticated hack to tell customers its NetExtender VPN client doesn’t have a zero-day vulnerability after all.
0 kommentar(er)
