CVE-2024-53705

highpriority · track · 0EPSS 0.007 · 53 %ileDEEUNLRU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.72% (53rd) EPSS

CVSS 8.6 · high

Is it mine?

20 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–8.6

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Lsecondary · NCSC-NL NL

v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondaryexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-338USCWE-918USCWE-918US

affected products (20)

Products and version ranges known to be affected.

SonicWall SonicOS Gen6 Hardware Firewalls <6.5.5.1-6nall versionscert_bundDE
SonicWall SonicOS Gen6 NSv <6.5.4.v-21s-RC2457all versionscert_bundDE
SonicWall SonicOS Gen7 <7.0.1-5165all versionscert_bundDE
SonicWall SonicOS Gen7 <7.1.3-7015all versionscert_bundDE
SonicWall SonicOS TZ80 <8.0.0-8037all versionscert_bundDE
SonicWall SonicOS≤ TZ80 <8.0.0-8037cert_bundDE
SonicWall SonicOS≤ Gen6 Hardware Firewalls <6.5.5.1-6ncert_bundDE
SonicWall SonicOS≤ Gen6 NSv <6.5.4.v-21s-RC2457cert_bundDE
SonicWall SonicOS≤ Gen7 <7.0.1-5165cert_bundDE
SonicWall SonicOS≤ Gen7 <7.1.3-7015cert_bundDE
SonicWall SonicOS≤ 6.5.4.15-117n and older versionsenisa_euvdEU
SonicWall SonicOS≤ 7.1.2-7019enisa_euvdEU
SonicWall SonicOS≤ 7.1.1-7058 and older versionsenisa_euvdEU
SonicWall SonicOS≤ 7.0.1-5161 and older versionsenisa_euvdEU
SonicWall SonicOS≤ 8.0.0-8035enisa_euvdEU
SonicWall SonicOS≤ 8.0.0-8037fstec_bduRU
SonicWall SonicOS≤ 7.1.2-7019fstec_bduRU
SonicWall SonicOS≤ 6.5.5.1-6nfstec_bduRU
sonicosall versionsncsc_nlNLcpe:2.3:a:sonicwall:sonicos:*:*:*:*:*:*:*:*
sonicwall ssl vpnall versionsncsc_nlNLcpe:2.3:h:sonicwall:ssl_vpn:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2025-0004Kwetsbaarheden verholpen in SonicWall SonicOSNL2025-01-08csaf · ncsc_nlNL
Sonicwall heeft kwetsbaarheden verholpen in SonicOS voor Gen6 en Gen7 firewalls.
WID-SEC-W-2025-0025SonicWall SonicOS: Mehrere SchwachstellenDeutsch2025-01-07csaf · cert_bundDE
Ein lokaler oder entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, die Authentifizierung zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl NVD CVE.org MITRE

published 2025-01-09modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan