SonicWall-CVE2024-53704: Exploit Details Blog
Reported exploitedSSL VPN component Read at Bishop Fox
Below is the opening; the full story is at Bishop Fox.
From Bishop Fox
Summary
Bishop Fox researchers successfully exploited CVE-2024-53704, an authentication bypass in unpatched SonicWall firewalls that allows remote attackers to hijack active SSL VPN sessions and gain unauthorized network access.
While the vulnerability required significant reverse engineering to uncover, the exploit itself is trivial, emphasizing the urgency for organizations to apply SonicWall’s January 2025 patches.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.