PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SonicWall CVE-2024-53704: SSL VPN Session Hijacking

bishopfox.com | vulnerability | CVE-2024-53704 | #reverse-engineering | #vulnerability | #session-hijacking | #sonicwall | #ssl-vpn | #cve-2024-53704
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Exploit details for CVE-2024-53704: Bishop Fox walks through the reverse engineering behind the SSL VPN session-hijacking flaw in unpatched SonicWall devices and urges January 2025 patches.
CVE
CVE-2024-53704
Published
Collected

Related coverage

vulnerability · bishopfox.com
SonicWall-CVE-2024-53704: Exploit Details
Bishop Fox explains its CVE-2024-53704 exploit: unauthenticated attackers can hijack active SSL VPN sessions on unpatched SonicWall firewalls and open tunnels without the victim's password. Patch now.
blog · bishopfox.com
SonicWall Sonicos Versions 7.1.x and 8.0.x
Bishop Fox found an unauthenticated DoS in SonicWall's SSL VPN (CVE-2025-32818): crafted API requests crash and reboot NSv appliances, taking the VPN offline. Patch to 7.2.0/8.0.1 or disable it.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
vulnerability · bishopfox.com
CVE-2024-21762 Vulnerability Scanner for FortiGate Firewalls
Bishop Fox built a scanner that safely detects FortiGate appliances affected by CVE-2024-21762, an out-of-bounds write in FortiOS SSL VPN, via chunked-encoding validation changes in the patch.
vulnerability · bishopfox.com
It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable
Bishop Fox found 178,637 of 233,984 internet-exposed SonicWall NGFW devices (76%) vulnerable to CVE-2022-22274 and CVE-2023-0656, unauthenticated DoS issues sharing one root cause; upgrade urged.
vulnerability · bishopfox.com
Building an Exploit for FortiGate Vulnerability CVE-2023-27997
Bishop Fox walks through building a proof-of-concept exploit for CVE-2023-27997, a pre-auth heap buffer overflow in Fortinet's SSL VPN, covering the flawed length check and jemalloc heap grooming.
Back