CVE-2024-53705: SSRF
Published Jan 9, 2025
·Updated
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.
Affected Software
1 affected component
SonicWall SonicOS
Event History
Jan 8, 2025
News Published
via BleepingComputer·07:16 PM
News Published
via BleepingComputer·07:18 PM
Jan 9, 2025
CVE Published
via MITRE·06:58 AM
Data Sourced
via MITRE·06:58 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Feb 11, 2025
News Published
via BleepingComputer·03:56 PM
Known Exploited
04:32 PM
Frequently Asked Questions
1
Is this vulnerability being exploited in the wild?
Yes. It is flagged as exploited and was added to the Known Exploited Vulnerabilities catalog on 2025-02-11.
2
What access does an attacker gain through successful exploitation?
An attacker can cause a TCP connection to be established to an IP address and port of their choice through the affected firewall. This can expose services reachable from the firewall that are not directly reachable by the attacker.
3
Does exploitation require attacker authentication or user interaction?
The supplied CVSS vector lists no required privileges and no user interaction. The vulnerability description also states that the condition applies when the user is logged in to the firewall.