CVE-2024-56524

Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special character to the request

Critical · published May 12, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

🔥 A sneaky special character is all it takes to bypass the Radware Cloud WAF – just like slipping a secret ingredient into a recipe nobody checks! Imagine a chef preparing a meal, but a clever diner can sneak in an ingredient without anyone noticing. That's how attackers can insert a special character to bypass the web application firewall, trusting it too much to filter effectively! This vulnerability could lead to devastating consequences, allowing attackers to smuggle malicious requests through the firewall. With clear skies for cybercriminals, they could exploit this to access sensitive data, inject malware, or even take full control of your services!

Put simply

Imagine a chef preparing a meal, but a clever diner can sneak in an ingredient without anyone noticing. That's how attackers can insert a special character to bypass the web application firewall, trusting it too much to filter effectively! CVE-2024-56524 enables remote attackers to bypass Radware Cloud WAF filters by adding a specific character to their requests, thus evading security measures meant to block harmful traffic.

What to do

This vulnerability could lead to devastating consequences, allowing attackers to smuggle malicious requests through the firewall. With clear skies for cybercriminals, they could exploit this to access sensitive data, inject malware, or even take full control of your services! Immediate action is crucial! Update your Radware Cloud WAF to the version released on or after 2025-05-07. Regularly review your firewall settings and monitor logs for any unusual activities. Stay vigilant! You've got this! By taking these steps, you're on your way to fortifying your defenses like a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Published
2025-05-12T00:00Z
EPSS history
Timeline
  • 12 MAY 00:00Z
    Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special character to the request
    cvelistv5