CVE-2024-53704

Published Jan 9, 2025

Last updated 8 months ago

Exploit known CVSS critical 9.8

Sonicwall

VPN

SSL

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-53704 is an authentication bypass vulnerability found in the SSL VPN component of SonicWall firewalls running the SonicOS operating system. This flaw allows unauthorized remote attackers to bypass the authentication mechanism and gain access to the network. The vulnerability exists due to improper authentication within the SSLVPN component. Exploitation attempts targeting this vulnerability began shortly after the public release of proof-of-concept exploit code on February 10, 2025. Patches for CVE-2024-53704 have been available since January 7, 2024. Federal Civilian Executive Branch agencies are mandated to address this vulnerability by March 11, 2025.

Description: An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sonicos

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Exploit added on: Feb 18, 2025
Exploit action due: Mar 11, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

PSIRT@sonicwall.com: CWE-287

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "065DD610-7821-4A0E-9CC8-1255F1729126",
            "versionEndIncluding": "7.1.1-7058",
            "versionStartIncluding": "7.1.1-7040",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sonicos:7.1.2-7019:*:*:*:*:*:*:*",
            "matchCriteriaId": "0131B5D1-47FF-4A35-8983-7C08E021F7A4",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A69E000B-5806-46FD-A233-4E2CC9DD38D2",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4C15FED5-C48C-47CF-9645-0563D77883C1",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "6739DEA3-06FF-4FEB-9931-0DB27F63B70E",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "7D6CF3CF-256C-4C04-8BDF-B16398CD0459",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "F2ABC8D8-2943-4073-9568-E87961A18998",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "9F57D527-AA3F-45E9-9BCE-6F76691066B5",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "F5ECCCF0-A5D8-42A8-8EC1-D12B49B1124A",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "70340DD4-687B-402C-85AF-C2B80D0F1600",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "52847BA2-470B-4078-A79B-52095DB9214B",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4DBDD10C-F89D-4051-BC70-67B41167FF9B",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "6C23940E-2F9D-447B-A740-42035ED5D400",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "90C790AD-C40E-4527-8F83-D278282A9600",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "352DFCF9-E333-41C0-8033-91265768FD8E",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "4C882C38-9DA5-4C03-BB23-AB2B448E3307",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sonicos:8.0.0-8035:*:*:*:*:*:*:*",
            "matchCriteriaId": "495254B3-5733-467E-AAA0-A9D385328C8E",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "129CC10F-E822-4BF7-9EB5-0D702020CB0C",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.