CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability. SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.
- CISA KEV-listed (remediation due 2025-03-11)
- used in ransomware campaigns
- EPSS 93.9% (99.9% percentile)