PT-2025-20699 · Radware · Radware Cloud Web Application Firewall

Published 2025-05-08 · Updated 2025-05-17 · CVE-2024-56523

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Radware Cloud Web Application Firewall (WAF) versions prior to 2025-05-07

Description The issue allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method.

Recommendations For versions prior to 2025-05-07, update to a version released after 2025-05-07 to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources that could be exposed by this bypass.

Fix

Improper Access Control

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-284

CWE-444

Related Identifiers

BDU:2026-00298

CVE-2024-56523

Affected Products

Radware Cloud Web Application Firewall

References · 11

• https://osv.dev/vulnerability/CVE-2024-56523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56523 · Security Note
• https://bdu.fstec.ru/vul/2026-00298 · Security Note
• https://t.me/cvetracker/23616 · Telegram Post
• https://twitter.com/cracbot/status/1923695095489892807 · Twitter Post
• https://t.me/cvedetector/25088 · Telegram Post
• https://twitter.com/CVEnew/status/1921947957651534015 · Twitter Post
• https://radware.com/solutions/cloud-security · Note
• https://kb.cert.org/vuls/id/722229 · Note
• https://tenable.com/cve/CVE-2024-56523 · Note
• https://twitter.com/TweetThreatNews/status/1922324106084507884 · Twitter Post