VULNERABILITY INTELLIGENCE

CVE-2024-53704

CVSS score9.8 CRITICAL
EPSS probability95.31%
CISA KEVKnown exploited vulnerability
Published2025-01-09
Last modified2026-08-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Vendor / product: SonicWall / SonicOS

Description

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Weakness classification

  • PSIRT@sonicwall.com: CWE-287

Primary references