coldbraid

CVE-2024-53704 SonicWall SonicOS

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

CVSS
not scored

CWE-287

On CISA’s exploited list

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Added
2025-02-18
Federal patch deadline
2025-03-11
Ransomware use
known