PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SonicWall-CVE-2024-53704: Exploit Details

bishopfox.com | vulnerability | CVE-2024-53704 | #authentication-bypass | #exploit | #session-hijacking | #sonicwall | #ssl-vpn | #cve-2024-53704
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox explains its CVE-2024-53704 exploit: unauthenticated attackers can hijack active SSL VPN sessions on unpatched SonicWall firewalls and open tunnels without the victim's password. Patch now.
CVE
CVE-2024-53704
Published
Collected

Related coverage

vulnerability · bishopfox.com
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Exploit details for CVE-2024-53704: Bishop Fox walks through the reverse engineering behind the SSL VPN session-hijacking flaw in unpatched SonicWall devices and urges January 2025 patches.
blog · bishopfox.com
SonicWall Sonicos Versions 7.1.x and 8.0.x
Bishop Fox found an unauthenticated DoS in SonicWall's SSL VPN (CVE-2025-32818): crafted API requests crash and reboot NSv appliances, taking the VPN offline. Patch to 7.2.0/8.0.1 or disable it.
vulnerability · bishopfox.com
[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chain
Bishop Fox reproduced the MikroTrick RouterOS takeover chain, using CVE-2026-67279 and a second flaw for unauthenticated admin access on 7.x, and confirmed real devices were already compromised.
vulnerability · bishopfox.com
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
Bishop Fox on CVE-2026-82329: a default Artifactory cluster join key anyone can derive, so one forged join request mints an admin token — CVSS 9.8, KEV-listed, fixed in 7.111.21.
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
vulnerability · bishopfox.com
CVE-2024-21762 Vulnerability Scanner for FortiGate Firewalls
Bishop Fox built a scanner that safely detects FortiGate appliances affected by CVE-2024-21762, an out-of-bounds write in FortiOS SSL VPN, via chunked-encoding validation changes in the patch.
Back