CVE-2024-53704

9.8 criticalKEVEPSS 95%

Critical (9.8) in SonicWall SonicOS. In CISA KEV since 2025-02-18, with known ransomware use. EPSS 95% chance of exploitation in the next 30 days.

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 95% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2025-02-18, due 2025-03-11, known ransomware use
CWE: CWE-287
Published: 2025-01-09
Modified: 2026-08-04
Record from: the NVD, synced 2026-10-19