Roses are red, violets are blue, CVE-2024-53704 is perfect for a ransomware crew Miscreants are actively abusing a ...

The exploitation of a recent SonicWall vulnerability has started shortly after proof-of-concept (PoC) code was published.

Bishop Fox says that internet scans as of February 7 show roughly 4,500 internet-exposed SonicWall SSL VPN servers without the security updates fixing CVE-2024-53704.

“An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access ...

Successful exploitation enables remote attackers to hijack active SSL VPN sessions without authentication, which grants them unauthorized access to targets' networks. SonicWall urged customers to ...

The high-severity SSLVPN authentication bypass flaw affecting SonicWall firewalls running vulnerable SonicOS versions is actively being exploited in-the-wild.