SonicWall CVE-2024-53704: SSL VPN Session Hijacking
PoC publicSonicOSSSL VPN Read at Bishop Fox
Below is the opening; the full story is at Bishop Fox.
From Bishop Fox
TL;DR: Bishop Fox researchers successfully exploited CVE-2024-53704, an authentication bypass in unpatched SonicWall firewalls that allows remote attackers to hijack active SSL VPN sessions and gain unauthorized network access.
While the vulnerability required significant reverse engineering to uncover, the exploit itself is trivial, emphasizing the urgency for organizations to apply SonicWall’s January 2025 patches.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.