Arctic Wolf Observes Authentication Bypass Exploitation Attempts Targeting SonicWall Firewalls (CVE-2024-53704)

Arctic Wolf reports that public PoC code for CVE-2024-53704 — an authentication bypass in SonicOS SSLVPN — was published and exploitation attempts were observed; the flaw can bypass MFA, disclose sensitive information, and interrupt VPN sessions, and Arctic Wolf recommends immediate upgrade to the fixed SonicOS versions specified to mitigate abuse by ransomware actors such as Akira affiliates.