ZDI-CAN-24819: ZDI-25-012: SonicWALL NSv Authentication Bypass Vulnerability

Published Jan 9, 2025

Updated

This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-53704.

Affected Software

1 affected component

SonicWALL NSv

Event History

Jan 9, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-24819?

The severity of ZDI-CAN-24819 is rated 9.8 on the CVSS scale, indicating a critical vulnerability.

How do I fix ZDI-CAN-24819?

To fix ZDI-CAN-24819, immediately update your SonicWALL NSv to the latest version that addresses this vulnerability.

What type of vulnerability is ZDI-CAN-24819?

ZDI-CAN-24819 is an authentication bypass vulnerability that allows remote attackers to access affected installations without authentication.

Which products are affected by ZDI-CAN-24819?

ZDI-CAN-24819 affects SonicWALL NSv installations.

Can ZDI-CAN-24819 be exploited remotely?

Yes, ZDI-CAN-24819 can be exploited remotely as it does not require authentication.