SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN

Updated report: Public disclosure and proof-of-concept code for CVE-2024-53704 — an SSL VPN authentication bypass in SonicOS affecting multiple Gen 7 and TZ80 SonicWall firewalls — has prompted active exploitation attempts and scanning against unpatched devices; researchers estimated roughly 4,500 internet-facing SonicWall SSL VPN servers remained unpatched and vendors strongly urge immediate firmware updates or disabling SSL VPN.