CVE-2024-53704NVD

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Severity Level

CRITICAL(9.8)

Published Date

Jan 9, 2025

Last Modified

Feb 19, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVE Watchtower