CVE-2024-45319

Published: Dec 5, 2024Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.

Affected (5)

Products: Sonicwall: Sma 200 Firmware, Sma 210 Firmware, Sma 400 Firmware, Sma 410 Firmware, Sma 500v Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 200 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 210 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 210	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 400 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 400	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 410 Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 410	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sma 500v Firmware	Before 10.2.1.14-75sv

Running on/with	Platform Versions
Sonicwall Sma 500v	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018

Source: PSIRT@sonicwall.com

Vendor Advisory

Timeline

No history available yet.