ET WEB_SPECIFIC_APPS SonicOS SSLVPN Authentication Bypass HTTP Cookie (swap) (CVE-2024-53704)

7.0.35.0SID: 2072670Rev: 1Enabled0 views
Sourceet/open
Fileemerging-web_specific_apps.rules
CreatedNovember 11, 2026
UpdatedNovember 11, 2026
Classificationweb-application-attack
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS SonicOS SSLVPN Authentication Bypass HTTP Cookie (swap) (CVE-2024-53704)"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/sessionstatus?cookie="; fast_pattern; base64_decode:relative; base64_data; content:"|00|"; reference:url,bishopfox.com/blog/sonicwall-cve-2024-53704-ssl-vpn-session-hijacking; reference:cve,2024-53704; classtype:web-application-attack; sid:2072670; rev:1; metadata:attack_target Networking_Equipment, created_at 2026_11_11, cve CVE_2024_53704, deployment Perimeter, deployment Internal, confidence Medium, signature_severity Major, updated_at 2026_11_11; target:dest_ip;)

References

urlbishopfox.com/blog/sonicwall-cve-2024-53704-ssl-vpn-session-hijacking
cve2024-53704

Metadata

attack targetNetworking_Equipment
created at2026_11_11
deploymentInternal
confidenceMedium
signature severityMajor
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!