What’s Vulnerable › Vulnerabilities

CVE-2024-22394

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-08 · updated 2026-06-17
• Weakness: CWE-287

Description

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.  This issue affects only firmware version SonicOS 7.1.1-7040.

Affected products

• SonicWall SonicOS: 7.1.1-7040

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0003
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0003

Get alerted when CVE-2024-22394 or the next vulnerability affects your stack