CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CVE-2024-53704 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2025-02-18

An improper authentication vulnerability in the SonicWall SonicOS SSLVPN authentication mechanism allows a remote attacker to bypass authentication. This flaw can lead to unauthorized access to the VPN and internal network resources.

Technologies: SonicWall SonicOS. Vendors: SonicWall.

Quick answers

Is CVE-2024-53704 exploited in the wild?
Yes. CVE-2024-53704 is known to be exploited in the wild, first recorded on 18 February 2025. Treat it as urgent.
How severe is CVE-2024-53704?
Critical severity, with a CVSS score of 9.8, published 18 February 2025.
Which products and versions are affected?
SonicWall SonicOS 7.1.1-7040 to 7.1.1-7058, 7.1.2-7019, 8.0.0-8035; SonicWall NSa 2700; SonicWall NSa 3700; SonicWall NSa 4700; and 15 more.
Is there a fix for CVE-2024-53704?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-53704 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-53704?
Check whether you run SonicWall SonicOS. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • SonicWall SonicOS 7.1.1-7040 to 7.1.1-7058, 7.1.2-7019, 8.0.0-8035
  • SonicWall NSa 2700
  • SonicWall NSa 3700
  • SonicWall NSa 4700
  • SonicWall NSa 5700
  • SonicWall NSa 6700
  • SonicWall NSsp 10700
  • SonicWall NSsp 11700
  • SonicWall NSsp 13700
  • SonicWall NSsp 15700
  • SonicWall NSv 270
  • SonicWall NSv 470
  • SonicWall NSv 870
  • SonicWall TZ270
  • SonicWall TZ370
  • SonicWall TZ470
  • SonicWall TZ570
  • SonicWall TZ670
  • SonicWall TZ80

Timeline

  • 2025-01-09: disclosed: Initial disclosure by SonicWall PSIRT
  • 2025-02-18: kev added: Added to CISA Known Exploited Vulnerabilities (KEV) catalog
  • 2025-02-18: exploited: CISA confirms active exploitation in the wild

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.