CVE-2024-53704

The error classified as CWE-287 (Improper Authentication) lies in the authentication mechanism of the SSLVPN interface in SonicOS. An attacker can send a specially crafted network request to the vulnerable device without providing valid credentials, and the flawed identity verification implementation results in access being granted. The attack requires no prior privileges or user interaction, and the network vector (AV:N) means it can be performed entirely remotely over the Internet.

Successful exploitation of the vulnerability allows an attacker to gain unauthorized access to protected network infrastructure, potentially leading to complete compromise of confidentiality, integrity, and availability of resources accessible through VPN. In practice, this may result in takeover of the organization's internal network.

Patches available from the manufacturer should be applied immediately in accordance with security bulletin SNWLID-2025-0003 published by SonicWall PSIRT. If immediate updates are not possible, it is recommended to temporarily disable or restrict access to the SSLVPN interface from the public network until the patch is deployed.

SonicWall SonicOS on devices: NSA 2700, NSA 3700, NSA 4700, and other SonicWall products from the SonicOS line equipped with SSLVPN functionality — specific firmware versions indicated in manufacturer references (SNWLID-2025-0003).

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.