← Back

CVE-2023-34123

nvd nist
Published: Jul 13, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected (8)

Sonicwall
2 products
Global Management System
Analytics
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Sonicwall
Global Management System
Before 9.3.2
Global Management System
Before 9.3.2
Global Management System
Version 9.3.2
Global Management System
Version 9.3.2
Global Management System
Version 9.3.2 sp1
Global Management System
Version 9.3.2 sp1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Sonicwall
Analytics
Before 2.5.0.4
Analytics
Version 2.5.0.4-r7

Related CWEs

CWE-321
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

Source: PSIRT@sonicwall.com
Vendor Advisory
Source: PSIRT@sonicwall.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.