Firetruck

CVE-2024-53704

KEV · Ransomware

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

View CVE record →
Vendor / Project
SonicWall
Product
SonicOS
Date added
Feb 18, 2025
Due date
Mar 11, 2025
Known ransomware use
Known
CWEs
CWE-287

Description

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes