Vulnerabilites Found in SonicWall Network Security Appliance
Hugo Vázquez Caramés found the flaws during an ethical hack of a customer's network.
A security researcher recently uncovered multiple vulnerabilities in SonicWall's NSA 4500 Network Security Appliance.
"Hugo Vázquez Caramés, chief executive of a Barcelona-based penetration testing firm, said the flaws were found during an ethical hack against a customer’s wireless network," writes SC Magazine's Darren Pauli.
"Caramés reported that MAC spoofing protection contained in the NSA 4500 unified threat management device was incompatible and would fail when used with SonicWall’s SonicPoint wireless access points," Pauli writes. "Penetration testers had conducted ARP spoofing attacks against a customer’s network and found MAC spoofing protection had failed but appeared functional to administrators."
Go to "Holes found in SonicWall god box" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.