CVE

CVE-2024-53704

P1⬤ KNOWN RANSOMWARE USE

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall · SonicOS

Date added (CISA)

2025-02-18

Remediation due

2025-03-11

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

Source: NVD ↗ · CISA KEV Catalog ↗