CVE-2024-53704

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication...

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

CVE-2024-40762

SonicWall SonicOS firewalls (specifically Gen6 and Gen7) are vulnerable to an authentication bypass due to the use of a cryptographically weak Pseudo-Random Number Generator (PRNG) in the SSLVPN authentication token generator. Attackers can predict these tokens to gain unauthorized access to prot...