Unplug Sonicwall EOL

SonicWall has warned that its older Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) gateways are being attacked in the wild by crooks to spread ransomware and as some of those devices are end-of-life, don’t expect any patches to protect them.

The SRA 4600/1600 (EOL in 2019), the SRA 4200/1200 (EOL in 2016), and SSL-VPN 200/2000/400 (EOL in 2013-2014) running firmware version 8.x are too out of date for SonicWall to patch, so users are told to unplug the gear and reset any account passwords that share the same credentials as the details may have been stolen.

The SMA 400/200, which is just about still supported, can be updated to firmware versions 10.2.0.7-34 or 9.0.0.10, which are said to be safe from the attacks, MFA to be enabled wherever possible.

The SMA 210/410/500v, which is still supported, should be upgraded to version 10.2.0.7-34sv or 9.0.0.10-28sv to mitigate the vulnerabilities, though we’re told they are not under active attack.

Organizations that fail to take appropriate actions to mitigate these vulnerabilities on their SRA and SMA 100 series products are at imminent risk of a targeted ransomware attack, SonicWall advised.