# CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Source: https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-02-18. Updated: 2026-05-09  
License: CC BY 4.0 with a link back

CVE-2024-53704 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2025-02-18

An improper authentication vulnerability in the SonicWall SonicOS SSLVPN authentication mechanism allows a remote attacker to bypass authentication. This flaw can lead to unauthorized access to the VPN and internal network resources.

Technologies: [SonicWall SonicOS](https://junglewise.ai/threats/technologies/sonicos). Vendors: [SonicWall](https://junglewise.ai/threats/vendors/sonicwall).

## Quick answers

**Is CVE-2024-53704 exploited in the wild?** Yes. CVE-2024-53704 is known to be exploited in the wild, first recorded on 18 February 2025. Treat it as urgent.

**How severe is CVE-2024-53704?** Critical severity, with a CVSS score of 9.8, published 18 February 2025.

**Which products and versions are affected?** SonicWall SonicOS 7.1.1-7040 to 7.1.1-7058, 7.1.2-7019, 8.0.0-8035; SonicWall NSa 2700; SonicWall NSa 3700; SonicWall NSa 4700; and 15 more.

**Is there a fix for CVE-2024-53704?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-53704 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2024-53704?** Check whether you run SonicWall SonicOS. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- SonicWall SonicOS 7.1.1-7040 to 7.1.1-7058, 7.1.2-7019, 8.0.0-8035
- SonicWall NSa 2700
- SonicWall NSa 3700
- SonicWall NSa 4700
- SonicWall NSa 5700
- SonicWall NSa 6700
- SonicWall NSsp 10700
- SonicWall NSsp 11700
- SonicWall NSsp 13700
- SonicWall NSsp 15700
- SonicWall NSv 270
- SonicWall NSv 470
- SonicWall NSv 870
- SonicWall TZ270
- SonicWall TZ370
- SonicWall TZ470
- SonicWall TZ570
- SonicWall TZ670
- SonicWall TZ80

## Timeline

- 2025-01-09: disclosed: Initial disclosure by SonicWall PSIRT
- 2025-02-18: kev added: Added to CISA Known Exploited Vulnerabilities (KEV) catalog
- 2025-02-18: exploited: CISA confirms active exploitation in the wild

## Related threats

- [SonicWall SonicOS heap-based buffer overflow in SSL-VPN](https://junglewise.ai/threats/cve-2026-82308-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has)
- [SonicWall SonicOS heap buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77709-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has)
- [SonicWall SonicOS stack-based buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77708-a-pre-authentication-stack-based-buffer-overflow-vulnerability)
- [SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn)
- [SonicWall SonicOS weak password hashing](https://junglewise.ai/threats/cve-2026-19703-a-weak-password-hashing-vulnerability-has-been-identified-on)