CVE-2024-22394: SonicWall SonicOS

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.  This issue affects only firmware version SonicOS 7.1.1-7040.

Affected products

• SonicWall SonicOS: version 7.1.1-7040 only

Published 2024-02-08. Last modified 2026-06-17.