CVE-2024-53706 - AskarLabs CVE Database

CVE-2024-53706

Vendor Sonicwall

Product SonicOS

Weakness CWE-269

Published January 9, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution.

Key dates

02Disclosure timeline

January 9, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-53706 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

04Related CVE

CVE-2023-34465 XWiki Platform's Mail.MailConfig can be edited by any user with edit rights CVE-2026-32760 File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin CVE-2024-47000 Service Users Deactivation not Working in Zitadel CVE-2022-41268 CVE-2024-43245 WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

Identifiers

CVE CVE-2024-53706

CWE CWE-269

Affected versions

Vendor Sonicwall

Product SonicOS

Affected 7.1.1-7058 and older versions

Vendor Sonicwall

Product SonicOS

Affected 7.1.2-7019