SonicOS firewalls
CVE-2024-53704: SonicOS SSLVPN Improper Authentication
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Published
ExploitedYes, in CISA KEVAdded 18 Feb 2025
Ransomware useKnownPer CISA
SeverityHIGHCVSS 3.1 8.2
EPSS95%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80) 7.1 | See the advisory |
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80) 8.0 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
Exploitation
CISA lists this CVE as exploited in the wild since 18 Feb 2025, including in ransomware campaigns.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.