Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SonicWall-CVE-2024-53704: Exploit Details

bishopfox.com | vulnerability | CVE-2024-53704 | #authentication-bypass | #exploit | #session-hijacking | #sonicwall | #ssl-vpn | #cve-2024-53704

Summary

Bishop Fox explains its CVE-2024-53704 exploit: unauthenticated attackers can hijack active SSL VPN sessions on unpatched SonicWall firewalls and open tunnels without the victim's password. Patch now.
Published
Collected

original ↗

Related coverage

  1. SonicWall CVE-2024-53704: SSL VPN Session Hijacking (bishopfox.com)
  2. SonicWall Sonicos Versions 7.1.x and 8.0.x (bishopfox.com)
  3. CVE-2026-55040 PoC: Microsoft SharePoint JWT authentication bypass (github.com)
  4. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)
  5. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  6. A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit (bishopfox.com)

back