VulnSocial

CVE-2024-53704Active Exploitation(sonicwall / nsa_2700)

MEDIUMCVSS 9.8 · CRITICALCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch sonicwall nsa_2700 systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

sonicwall CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-03-11. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-287

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsa_2700
  • nsa_3700
  • nsa_4700
  • nsa_5700

Threat summary

  • Active exploitation appears in 2 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 2 signals
  • Patch or workaround mentioned in 1 signal
  • Peaked 2d ago at 1 mentions (2026-02-09); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
sonicwall
Products
nsa_2700nsa_3700nsa_4700nsa_5700nsa_6700nssp_10700nssp_11700nssp_13700nssp_15700nsv_270

3 versions affected across 24 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-02-09: 1Mentions · 2026-02-17: 1Mentions · 2026-02-27: 1Active Exploitation · 2026-02-09: 1Active Exploitation · 2026-02-17: 1Patch / Workaround · 2026-02-27: 102-0902-1702-27
Signal classification2 categories
Active Exploitation
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-02-091
Active Exploitation1
2026-02-171
Active Exploitation1
2026-02-271
Patch1
Full discourse3 posts
  • SOCRadar®@socradar
    Active Exploitation

    Sinobi Ransomware has surfaced with a 63.2% code overlap to Lynx, targeting US manufacturing and healthcare. Operating as a hybrid RaaS, it exploits VPN vulnerabilities like CVE-2024-53704 to deploy double extortion attacks. Read more: https://hubs.la/Q043kC6q0 #Ransomware #CyberSecurity #ThreatIntel

    Post summary

    Sinobi Ransomware is actively exploiting the CVE-2024-53704 VPN vulnerability to conduct double extortion attacks against US manufacturing and healthcare targets.

    11052510
    5.6K followersView on X
  • Proven Data@Proven_Data
    Active Exploitation

    Sinobi ransomware hit hundreds of U.S. orgs in under a year. Primary entry: stolen VPN credentials and SonicWall CVE-2024-53704. Full attack chain breakdown → https://www.provendata.com/blog/sinobi-ransomware/ #Ransomware #IncidentResponse #CyberSecurity #ThreatIntel #RansomwareAttack #InfoSec https://t.co/fvnYVtlC8B

    Post summary

    Sinobi ransomware leveraged stolen VPN credentials and the SonicWall CVE‑2024‑53704 vulnerability to compromise hundreds of U.S. organizations.

    00030237
    913 followersView on X
  • ExploitKid@yashwanth2207
    Patch

    @GreyNoiseIO 84K sessions, near-zero exploitation. When Akira follows, they'll know exactly which SonicWalls to hit. Patch CVE-2024-53704 before the recon becomes ransomware.

    Post summary

    The post warns of many reconnaissance sessions targeting CVE-2024-53704 with minimal exploitation, urging users to apply the patch before potential ransomware use.

    00000117
    16 followersView on X
CPE platform detail26 entries

26 of 26 entries

PartVendorProductVersionTarget SWTarget HW
HWsonicwallnsa_2700---
HWsonicwallnsa_3700---
HWsonicwallnsa_4700---
HWsonicwallnsa_5700---
HWsonicwallnsa_6700---
HWsonicwallnssp_10700---
HWsonicwallnssp_11700---
HWsonicwallnssp_13700---
HWsonicwallnssp_15700---
HWsonicwallnsv_270---
HWsonicwallnsv_470---
HWsonicwallnsv_870---
OSsonicwallsonicos---
OSsonicwallsonicos7.1.2-7019--
OSsonicwallsonicos8.0.0-8035--
HWsonicwalltz270---
HWsonicwalltz270w---
HWsonicwalltz370---
HWsonicwalltz370w---
HWsonicwalltz470---
HWsonicwalltz470w---
HWsonicwalltz570---
HWsonicwalltz570p---
HWsonicwalltz570w---
HWsonicwalltz670---
HWsonicwalltz80---

Explore more

Back to dashboardsonicwall CVEsnsa_2700 vulnerabilities