CVE-2024-53704

criticalpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.953 · 100 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 3 exploits · PoC

Likely / severe?

95.3% (100th) EPSS

CVSS 9.8 · critical

Is it mine?

21 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

added 2025-02-18remediate by 2025-03-11

required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-22

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.2–9.8

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.18.2highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondary · ENISA EU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondaryexploitability 3.9 · impact 4.2

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USCWE-287USCWE-338US

ATT&CK techniques

ATT&CK techniques this enables or maps to.

exploits (3)

Public proof-of-concept and weaponised exploit code.

affected products (21)

Products and version ranges known to be affected.

SonicWall SonicOS Gen6 Hardware Firewalls <6.5.5.1-6nall versionscert_bundDE
SonicWall SonicOS Gen6 NSv <6.5.4.v-21s-RC2457all versionscert_bundDE
SonicWall SonicOS Gen7 <7.0.1-5165all versionscert_bundDE
SonicWall SonicOS Gen7 <7.1.3-7015all versionscert_bundDE
SonicWall SonicOS TZ80 <8.0.0-8037all versionscert_bundDE
SonicWall SonicOS≤ TZ80 <8.0.0-8037cert_bundDE
SonicWall SonicOS≤ Gen6 Hardware Firewalls <6.5.5.1-6ncert_bundDE
SonicWall SonicOS≤ Gen6 NSv <6.5.4.v-21s-RC2457cert_bundDE
SonicWall SonicOS≤ Gen7 <7.0.1-5165cert_bundDE
SonicWall SonicOS≤ Gen7 <7.1.3-7015cert_bundDE
SonicWall SonicOS≤ 7.1.2-7019enisa_euvdEU
SonicWall SonicOS≤ 8.0.0-8035enisa_euvdEU
SonicWall SonicOS≤ 7.1.1-7058 and older versionsenisa_euvdEU
SonicWall SonicOS≤ 8.0.0-8037fstec_bduRU
SonicWall SonicOS≤ 7.1.2-7019fstec_bduRU
SonicWall SonicOS≤ 6.5.5.1-6nfstec_bduRU
sonicosall versionsncsc_nlNLcpe:2.3:a:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwall ssl vpnall versionsncsc_nlNLcpe:2.3:h:sonicwall:ssl_vpn:*:*:*:*:*:*:*:*
sonicwall sonicos7.1.1-7040 → 7.1.1-7058nvdUScpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwall sonicos= 7.1.2-7019nvdUScpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*

showing 20 of 21

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2025-0004Kwetsbaarheden verholpen in SonicWall SonicOSNL2025-01-08csaf · ncsc_nlNL
Sonicwall heeft kwetsbaarheden verholpen in SonicOS voor Gen6 en Gen7 firewalls.
WID-SEC-W-2025-0025SonicWall SonicOS: Mehrere SchwachstellenDeutsch2025-01-07csaf · cert_bundDE
Ein lokaler oder entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, die Authentifizierung zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2025-01-09modified 2026-08-04

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan