| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | exploitation_technique | T1199 | Trusted Relationship |
Comments
Due to improper session cookie validation in SonicOS, an attacker can hiijack an active session without any credentials.
References
|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | exploitation_technique | T1212 | Exploitation for Credential Access |
Comments
Due to improper session cookie validation in SonicOS, an attacker can hiijack an active session without any credentials.
References
|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | primary_impact | T1078.004 | Cloud Accounts |
Comments
Due to improper session cookie validation in SonicOS, an attacker can hiijack an active session without any credentials.
References
|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | primary_impact | T1083 | File and Directory Discovery |
Comments
Due to improper session cookie validation in SonicOS, an attacker can hiijack an active session without any credentials.
References
|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | secondary_impact | T1021.001 | Remote Desktop Protocol |
Comments
Due to improper session cookie validation in SonicOS, an attacker can hiijack an active session without any credentials.
References
|