SonicWall Statement about Amnesia:33

BWC

Hi guys,

while awaiting an official PSIRT statement about the NAT slipstreaming thingy, I came acress Amnesia:33, which sounds severe.

Any relevance on SNWL? No status reported back to the CERT at CMU according to:

https://kb.cert.org/vuls/id/815128

--Michael@BWC

Micah

Hello @BWC ,

SonicWall firewall products are not affected by the Amnesia 33 vulnerabilities.

Learn more: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0025

If this answered your question please mark the appropriate response so that others may benefit.

Kind Regards,

shiprasahu93

Hello @BWC,

It is already reported to Engineering as below:

1) Gen 6 on 6.5.4.7 -> Issue ID GEN6-2186

2) Gen 7 on SonicOS 7.0.0.0 -> Issue ID GEN7-19972

Both of these are being looked over by Engineering with high priority. If I receive any more updates, I will share it here.

Thanks!

BWC

Hi @shiprasahu93

any update on this? It's nearly 2 weeks, just wanna be sure we're golden.

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01

--Michael@BWC

shiprasahu93

Hey @BWC,

I don't see anything more on the JIRA itself.

@Micah - Can you please engage the concerned team on this?

Thanks!