SonicWall warns of unpatched flaws in end-of-life GMS software
Summary
SonicWall has warned customers about two security flaws affecting its end-of-life Global Management System (GMS) software. Because the product has reached end-of-life, the flaws will not receive patches. Customers are advised to plan migration or otherwise mitigate their exposure.
IFF Assessment
Unpatched vulnerabilities in a widely used security management platform give attackers a lasting opening against defenders who cannot fix the flaws.
Defender Context
Organizations running end-of-life SonicWall GMS should identify all instances, restrict network exposure, and prioritize migration to supported products. Unpatched edge and management appliances are a frequent target for threat actors, so monitoring for exploitation attempts is critical. This highlights the broader risk of end-of-life security infrastructure remaining in production.