PT-2025-1016 · Sonicwall · Sonicos

Published 2025-01-07 · Updated 2025-01-10 · CVE-2024-53705

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall. This issue is related to insufficient validation of requests on the server side. The vulnerability can be exploited by a remote attacker to perform an SSRF attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2025-00213

CVE-2024-53705

ZDI-25-013

Affected Products

Sonicos

References · 18

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53705 · Security Note
• https://bdu.fstec.ru/vul/2025-00213 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-013 · Security Note
• https://twitter.com/CVEnew/status/1877256306438058095 · Twitter Post
• https://twitter.com/fletch_ai/status/1877762409865355452 · Twitter Post
• https://twitter.com/zoomeye_team/status/1876939798335926577 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1877481681625465111 · Twitter Post
• https://twitter.com/autumn_good_35/status/1876959957846757818 · Twitter Post
• https://sonicwall.com/support/notices/product-notice-sslvpn-and-ssh-vulnerability-in-sonicos/250107100311877 · Note
• https://securityonline.info/sonicwall-issues-important-security-advisory-for-multiple-vulnerabilities-in-sonicos · Note
• https://twitter.com/Patrowl_io/status/1877287609468088567 · Twitter Post
• https://t.me/cvedetector/14796 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1877279690395635840 · Twitter Post
• https://reddit.com/r/sonicwall/comments/1hvm5cw/critical_vulnerabilities_in_sslvpn · Reddit Post