← Back

CVE-2024-53702

nvd nist
Published: Dec 5, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.

Affected (5)

Sonicwall
5 products
Sma 200 Firmware
Sma 210 Firmware
Sma 400 Firmware
Sma 410 Firmware
Sma 500v Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sma 200 Firmware
Before 10.2.1.14-75sv
Running on/withPlatform Versions
Sonicwall
Sma 200
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sma 210 Firmware
Before 10.2.1.14-75sv
Running on/withPlatform Versions
Sonicwall
Sma 210
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sma 400 Firmware
Before 10.2.1.14-75sv
Running on/withPlatform Versions
Sonicwall
Sma 400
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sma 410 Firmware
Before 10.2.1.14-75sv
Running on/withPlatform Versions
Sonicwall
Sma 410
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sma 500v Firmware
Before 10.2.1.14-75sv
Running on/withPlatform Versions
Sonicwall
Sma 500v
All versions

Related CWEs

CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

References (1)

Source: PSIRT@sonicwall.com
Vendor Advisory

Timeline

No history available yet.