CVE-2024-53704 is a CWE-287 improper authentication vulnerability in SonicWall SonicOS's SSLVPN authentication mechanism. This vulnerability enables a remote attacker to bypass authentication controls, potentially gaining unauthorized access. The affected versions explicitly include 7.1.2-7019 and 8.0.0-8035. The CVSS v3.1 base score is 8.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No patch or vendor advisory information is available to confirm remediation status.

The vulnerability allows remote attackers to bypass authentication on affected SonicOS SSLVPN implementations, which could lead to unauthorized access and disruption of availability. Confidentiality impact is low, integrity impact is none, but availability impact is high according to the CVSS vector. This could result in denial of service or disruption of VPN services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor SonicWall advisories closely and apply updates once available. Until then, consider restricting access to SSLVPN interfaces and applying network-level controls to limit exposure.