返回 CVE 瀏覽器

CVE-2024-53704

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-01-09

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Affected Platforms (CPE)

💻

Sonicwall

Sonicos

>= 7.1.1-7040 and <= 7.1.1-7058= 7.1.2-7019= 8.0.0-8035

References & Advisories

🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53704

相關資安分析文章

全球網絡威脅情報摘要：2026 年 7 月 23 日

本期情報重點包含 CISA 將 Langflow CVE-2026-0770 遠端程式碼執行漏洞列入 KEV 已知利用目錄、Windmill CVE-2026-29059 未經身分驗證路徑穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持續追蹤與防禦建議。

全球網絡威脅情報摘要：2026 年 7 月 20 日

本期報告深入技術拆解 UTA0533 利用 SonicWall SMA1000 零日漏洞鏈進行 root 權限執行攻擊、NGINX 正規表示式堆疊毀損 DoS 漏洞 (CVE-2026-42533)，以及 Sandworm (UAC-0145) ClickFix 偽造驗證碼攻擊手法。

相關漏洞威脅

CVE-2025-406017.5

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial...

CVE-2025-406009.8

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker...

CVE-2025-328187.5

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker ...

CVE-2024-407659.8

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause D...