Sonicwall (TZ470 …) and CVEs

bpelleti

I am running my vulnerability scanner software and I regularly receive CVE vulnerabilities against my Sonicwall even after I have updated it with the latest patch.

As I chase down these vulnerabilities, I wonder how others are reconciling their reports. Do you send those along to Sonicwall, disable unnecessary services or accept the vulnerabilities?

Thank you for your consideration,

Bob Pelletier

MarkD

I would first review the CVE and the rating and cross reference with the SW security advisory

Security Advisory (sonicwall.com)

Are the results of the scans being carried out externally or internally

bpelleti

https://community.sonicwall.com/technology-and-support/discussion/comment/22277#Comment_22277

Cool. Thank you. I will have a look at that first.

Thanks again.

Simon_Weel

I am running my vulnerability scanner software

Might I ask what software you are using for those scans?