SonicOS firewalls
CVE-2024-53705: Server-Side Request Forgery in SonicOS
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 3.1 7.5
EPSS0.74%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80, Gen6 Hardware) 6.5 | See the advisory |
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80, Gen6 Hardware) 7.0 | See the advisory |
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80, Gen6 Hardware) 7.1 | See the advisory |
| SonicOS (Gen7 Hardware, Gen7 NSv, TZ80, Gen6 Hardware) 8.0 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.