Back to the CVE list
CVE-2024-53704 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Improper authentication in SonicWall SonicOS

CVSS score

9.8

EPSS probability

%95.3

Risk score

18.7

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Exploit for CVE-2024-53704 - SonicWall SonicOS SSLVPN authentication bypass (★0)

Public PoCSource updated: 21.01.2026 21:26:21

demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist. (★0)

Public PoCSource updated: 12.02.2025 05:43:40

Nuclei: SSL VPN Session Hijacking

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-53704"