
“No action is required from customers or partners.” It may be used with all SonicWall products,” SonicWall announced at 10:45 p.m. “While we previously communicated NetExtender 10.x as potentially having a zero-day, that has now been ruled out. That’s in stark contrast to Friday night, when SonicWall announced that highly sophisticated threat actors attacked its internal systems by exploiting a probable zero-day flaw in both its SMA 100 and NetExtender products. The Milpitas, Calif.-based platform security vendor said late Saturday that only its SMB-oriented Secure Mobile Access (SMA) 100 series tool remains under investigation for a security flaw.



SonicWall updated its guidance a day after disclosing a sophisticated hack to tell customers its NetExtender VPN client doesn’t have a zero-day vulnerability after all.
