CVE Watch—

CVE-2024-53704

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CVSS

—

Sin CVSS

EPSS

95.1%

p100

KEV

SÍ

18 feb 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

95.1%EPSS · 30 días95.1%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

SonicWall / SonicOS

Vulnerabilidad

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Añadido a KEV

18 feb 2025

Remediar antes de

11 mar 2025

Uso conocido en ransomware

Sí

Descripción resumida

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53704

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-5135—

97.8%

KEV—79SonicWall SonicOS Buffer Overflow Vulnerability—CVE-2024-40766—

96.5%

KEV—79SonicWall SonicOS Improper Access Control Vulnerability—