Sonicwall released a new security advisory containing 8 vulnerabilities with multiple being critically rated. The vulnerabilities allow remote attackers to gain root access and require immediate patching. You can read more about the vulnerabilities in the SonicWall blog post.
The report below will let you identify all the SonicWall SMA 100-series devices that might be impacted. By listing all of the devices along with the firmware version, you can consult the SonicWall security advisory to check if your devices’ firmware is up-to-date or not.
SonicWall SMA 100-series Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Description,
SubString(tblAssets.Description, CharIndex('(', tblAssets.Description) + 1,
(((Len(tblAssets.Description)) - CharIndex(')',
Reverse(tblAssets.Description))) - CharIndex('(', tblAssets.Description))) As
[Firmware Version],
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where (tblAssets.Description Like '%SMA 2_0%' Or tblAssets.Description
Like '%SMA 4_0%' Or tblAssets.Description Like '%SMA 500%') And
tblState.Statename = 'Active'
Order By tblAssets.Domain,
tblAssets.AssetName
