CVE-2024-53704
CRITICAL CISA KEVDescription
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
CVSS v3.1 Score
CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sonicwall | sonicos |
| sonicwall | sonicos |
| sonicwall | nsa_2700 |
| sonicwall | nsa_3700 |
| sonicwall | nsa_4700 |
| sonicwall | nsa_5700 |
| sonicwall | nsa_6700 |
| sonicwall | nssp_10700 |
| sonicwall | nssp_11700 |
| sonicwall | nssp_13700 |
| sonicwall | nssp_15700 |
| sonicwall | nsv_270 |
| sonicwall | nsv_470 |
| sonicwall | nsv_870 |
| sonicwall | tz270 |
| sonicwall | tz270w |
| sonicwall | tz370 |
| sonicwall | tz370w |
| sonicwall | tz470 |
| sonicwall | tz470w |
| sonicwall | tz570 |
| sonicwall | tz570p |
| sonicwall | tz570w |
| sonicwall | tz670 |
| sonicwall | sonicos |
| sonicwall | tz80 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-53704? +
How severe is CVE-2024-53704? +
What products are affected by CVE-2024-53704? +
How do I check if I'm vulnerable to CVE-2024-53704? +
Related Vulnerabilities
Insufficient state checks lead to a vector that allows to bypass 2FA checks.
Insufficient state checks lead to a vector that allows to bypass 2FA checks.
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated …
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX …
PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy …