FlagThis

A critical authentication bypass vulnerability, identified as CVE-2024-53704, in SonicWall firewalls is under active exploitation. Security firms are warning that attackers are now targeting this flaw following the public release of proof-of-concept exploit code. The vulnerability allows attackers to bypass authentication, posing a significant risk to affected systems.

Security updates are available for download to address the issue, and users are strongly urged to patch their SonicWall firewalls immediately. Attacks are currently taking place, making prompt action essential to mitigate potential exploits. The vulnerability highlights the importance of keeping security infrastructure up-to-date to defend against emerging threats.

ImgSrc: blogger.googleusercontent.com

References:

• @BleepingComputer - Attackers are now targeting an authentication bypass vulnerability affecting SonicWall firewalls shortly after the release of proof-of-concept (PoC) exploit code. - 6d
• @youranonriots - Attackers are now targeting an authentication bypass vulnerability affecting SonicWall firewalls shortly after the release of proof-of-concept (PoC) exploit code. - 6d
• @heiseonlineenglish - Patch Sonicwall now! Attackers bypass authentication of firewalls Attacks are currently taking place on Sonicwall firewalls. Security updates are available for download. - 6d

Classification:

• HashTags: SonicWall Firewall Vulnerability
• Company: SonicWall
• Target: SonicWall users
• Attacker: Unspecified
• Product: SonicWall firewalls
• Feature: Authentication Bypass
• Type: 0Day
• Severity: Major