{"id":"CVE-2024-53704","title":"An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.","summary":"An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-287"],"vendor":"sonicwall","product":"sonicos","affected":["sonicos >= 7.1.1-7040, <= 7.1.1-7058","sonicos = 7.1.2-7019","sonicos = 8.0.0-8035"],"published":"2025-01-09","updated":"2026-08-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-53704","references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003","label":"PSIRT@sonicwall.com"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53704","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.95132,"epssPercentile":0.99863,"kev":true,"kevDateAdded":"2025-02-18","kevDueDate":"2025-03-11","kevRansomware":true,"exploited":true,"ingestedAt":"2026-08-04T05:36:12.757Z","exploits":{"github":3,"githubRepos":["https://github.com/sfewer-r7/SonicSessionLeak","https://github.com/istagmbh/CVE-2024-53704","https://github.com/anir0y/sonicwall-audit-toolkit"],"nuclei":["CVE-2024-53704"],"checkedAt":"2026-09-21T15:27:03.019Z"},"exploitAvailable":true,"slug":"CVE-2024-53704","body":"## Overview\n\nAn Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.\n\n## Affected\n\n- `sonicos >= 7.1.1-7040, <= 7.1.1-7058`\n- `sonicos = 7.1.2-7019`\n- `sonicos = 8.0.0-8035`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"hadal","depthScore":100,"depthScoreParts":{"impact":53.9,"likelihood":19,"exploitation":25,"ransomware":5},"changes":[{"seq":4769,"id":"CVE-2024-53704","ts":1788887205324,"field":"exploit_available","old":"false","new":"true"},{"seq":3652,"id":"CVE-2024-53704","ts":1788886321932,"field":"exploit_available","old":"true","new":"false"},{"seq":2503,"id":"CVE-2024-53704","ts":1788882989682,"field":"exploit_available","old":"false","new":"true"},{"seq":1532,"id":"CVE-2024-53704","ts":1788882403530,"field":"exploit_available","old":"true","new":"false"},{"seq":646,"id":"CVE-2024-53704","ts":1788881841090,"field":"exploit_available","old":"false","new":"true"}]}