CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Campagnes de rançongiciel Utilisation connue

Faiblesse CWE-287

Description

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
SonicOS	8.0.0-8035	Pas de correctif indiqué
SonicOS	7.1.2-7019	Pas de correctif indiqué

Autres CVE de SonicOS

Les 75 CVE de SonicOS →

CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Moyenne CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Moyenne CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Moyenne CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability 7.5 Élevée