critical9.8Known exploited
CVE-2024-53704
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-02-18. Federal due date: 2025-03-11.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sonicos | from 7.1.1-7040 through 7.1.1-7058 Versions 7.1.2-7019, 8.0.0-8035 |