QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-53705

Back to search

CVE-2024-53705

Published: Jan 9, 2025

Modified: Jan 9, 2025

PUBLISHED

Description

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.

VendorProductVersions

SonicWall

SonicOS

affected
6.5.4.15-117n and older versions
affected
7.0.1-5161 and older versions
affected
7.1.1-7058 and older versions
affected
7.1.2-7019
affected
8.0.0-8035

Weaknesses (CWE)

CWE-918

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now