Actively exploited in the wild
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
SonicWall - SonicOS · Listed in the CISA KEV since 2025-02-18. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-53704
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Risk Assessment
An attacker can gain unauthorized access to the VPN network, potentially leading to confidentiality and integrity breaches.
Recommendation
Apply patches provided by the vendor. Restrict access to SSLVPN and monitor login attempts.
Original NVD description (English source)
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.