← Back

CVE-2024-53704

nvd nistnuclei
Published: Jan 9, 2025Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Affected (3)

Products: Sonicwall: Sonicos
Sonicwall
1 product
Sonicos
Configuration A
2 vulnerable · 22 platform
Vulnerable SoftwareAffected Versions
Sonicwall
Sonicos
From 7.1.1-7040 to 7.1.1-7058
Sonicos
Version 7.1.2-7019
Running on/withPlatform Versions
Sonicwall
Nsa 2700
All versions
Sonicwall
Nsa 3700
All versions
Sonicwall
Nsa 4700
All versions
Sonicwall
Nsa 5700
All versions
Sonicwall
Nsa 6700
All versions
Sonicwall
Nssp 10700
All versions
Sonicwall
Nssp 11700
All versions
Sonicwall
Nssp 13700
All versions
Sonicwall
Nssp 15700
All versions
Sonicwall
Nsv 270
All versions
Sonicwall
Nsv 470
All versions
Sonicwall
Nsv 870
All versions
Sonicwall
Tz270
All versions
Sonicwall
Tz270w
All versions
Sonicwall
Tz370
All versions
Sonicwall
Tz370w
All versions
Sonicwall
Tz470
All versions
Sonicwall
Tz470w
All versions
Sonicwall
Tz570
All versions
Sonicwall
Tz570p
All versions
Sonicwall
Tz570w
All versions
Sonicwall
Tz670
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sonicos
Version 8.0.0-8035
Running on/withPlatform Versions
Sonicwall
Tz80
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: PSIRT@sonicwall.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.