CVE-2024-22394

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Feb 8, 2024
Updated: Feb 14, 2024
CWE ID 287

Summary

CVE-2024-22394 is an improper authentication vulnerability found in the SonicWall SonicOS SSL-VPN feature. It affects only firmware version SonicOS 7.1.1-7040. In specific conditions, this vulnerability allows a remote attacker to bypass authentication, posing a significant danger to organizations using the affected firmware version. The CVSS score for this vulnerability is 9.8 out of 10, indicating a critical severity level. Remediation measures are not provided in the given text, and further information is required for detailed mitigation steps.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2024-22394 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions