Sonicos
CVE-2024-53704
CRITICAL
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication mechanism validation
MITRE ATT&CK
2 techniques across 2 tactics: Defense Evasion, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | Critical risk (CVSS 9.8, EPSS 93.9%). SonicWall firewalls are widely deployed in small-to-medium enterprises. Authentication bypass on the VPN gateway provides direct network access, bypassing all perimeter security controls. |
| Exploit ScenarioDerived | An attacker exploits the SSLVPN authentication bypass to establish a VPN session without credentials. The VPN provides full network access as if the attacker were a legitimate remote user, enabling access to internal resources, file shares, and business applications. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 28, 2026
SonicWall SonicOS SSLVPN contains an authentication bypass vulnerability allowing remote attackers to bypass authentication mechanisms and gain unauthorized VPN access to protected networks.
Earlier versions of this analysis (1)
An improper authentication vulnerability in SonicWall's SSLVPN enables remote attackers to bypass authentication entirely and gain VPN access without valid credentials.
RemediationAI
Apply SonicWall firmware updates. Restrict VPN access by source IP where possible. Enable MFA as an additional control. Monitor VPN session logs for unauthorized connections.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CWE-287 authentication bypass in the SSLVPN authentication mechanism allows unauthenticated attackers to circumvent login controls through crafted requests, gaining the same access as legitimately authenticated VPN users.
Know when Sonicos gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Executive ViewAI
Organizations using An Improper Authentication vulnerability in the SSLVPN authentication mechanism face critical risk from CVE-2024-53704, a improper authentication vulnerability rated CVSS 9.8. Attackers could bypass security controls to gain unauthorized access to protected resources and sensitive data. This vulnerability is actively exploited in the wild (KEV-listed) and requires immediate remediation. Immediate patching is required per CISA KEV mandate.
Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls; (2) Enable MFA where possible; (3) Monitor authentication logs for anomalous access.
Threat Intelligence Overview
NVD
CVE.org
CISA KEV
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Affected Products (CPE)NVD
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially lea
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated med
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this v
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulne
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management
An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific con
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially exe
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical seve
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS
GitHub PoC
Exploit-DB