Skip to content
OpenAdvisories
High · 7.5 CVE-2024-53705 EUVD-2024-52038GHSA-mr76-pvc2-w479

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection …

Published Jan 9, 2025 · Updated Jan 9, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: SonicOS Category: Network devices

Description

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.

Affected products

VendorProductAffectedFixed
SonicWall SonicOS 6.5.4.15-117n and older versions, 7.0.1-5161 and older versions, 7.1.1-7058 and older versions, 7.1.2-7019, 8.0.0-8035 —

Advisories 2

References