CVE-2024-53704β€”SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

PUBLISHEDvulnerability record
2025-02-18 Β· last modified December 22, 2025

Metadata

CVE ID:
CVE-2024-53704
Project:
SonicWall
Product:
SonicOS
Date Added:
2025-02-18
Due Date:
2025-03-11
Last Updated:
December 22, 2025

Vulnerability Name

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Description

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

  • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
  • https://nvd.nist.gov/vuln/detail/CVE-2024-53704

Related News Articles

Related Weaknesses

browse all CVEs