Privilege Escalation Vulnerability in Gen7 SonicOS Cloud Platform by SonicWall
CVE-2024-53706

Currently unrated

Key Information:

Vendor
Sonicwall
Status
Sonicos
Vendor
CVE Published:
9 January 2025

Summary

A vulnerability in the Gen7 SonicOS Cloud platform NSv enables a remote authenticated local attacker with low privileges to escalate their privileges to root. This escalation could allow the attacker to execute arbitrary code, posing significant risks to system security and stability.

Affected Version(s)

SonicOS Gen7 NSv Cloud platform 7.1.1-7058 and older versions

SonicOS Gen7 NSv Cloud platform 7.1.2-7019

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daan Keuper, Thijs Alkemade and Khaled Nassar of Computest Security through Trend Micro (Zero Day Initiative)
.