SonicWall has patched three zero-day vulnerabilities in the hosted and on-premises versions of its Email Security product. Vulnerabilities could be used to access email, pivot further into victims’ systems, FireEye says. FireEye Mandiant says it has seen attackers using the three vulnerabilities to place web shells, or remote access scripts, on systems. The vulnerable software includes. Email Security versions 10.0.1 and up, according to a SonicWall advisory. For Windows, organizations should update to Email Security version.”]
Source: https://www.careersinfosecurity.com/sonicwall-patches-3-zero-day-flaws-a-16439