9.8

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. 

This issue affects only firmware version SonicOS 7.1.1-7040.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Sonicos Version 7.1.1-7040
   Sonicwall ≫ Nsa 2700 Version -
   Sonicwall ≫ Nsa 3700 Version -
   Sonicwall ≫ Nsa 4700 Version -
   Sonicwall ≫ Nsa 5700 Version -
   Sonicwall ≫ Nsa 6700 Version -
   Sonicwall ≫ Nssp 10700 Version -
   Sonicwall ≫ Nssp 11700 Version -
   Sonicwall ≫ Nssp 13700 Version -
   Sonicwall ≫ Nsv 270 Version -
   Sonicwall ≫ Nsv 470 Version -
   Sonicwall ≫ Nsv 870 Version -
   Sonicwall ≫ T2270 Version -
   Sonicwall ≫ Tz270w Version -
   Sonicwall ≫ Tz370 Version -
   Sonicwall ≫ Tz370w Version -
   Sonicwall ≫ Tz470 Version -
   Sonicwall ≫ Tz470w Version -
   Sonicwall ≫ Tz570 Version -
   Sonicwall ≫ Tz570p Version -
   Sonicwall ≫ Tz570w Version -
   Sonicwall ≫ Tz670 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.75% 0.5
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0003
Vendor Advisory