CVE-2024-53702

Description

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.

Reserved 2024-11-22 | Published 2024-12-05 | Updated 2024-12-05 | Assigner sonicwall

Problem types

CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Product status

Default status
unknown

10.2.1.13-72sv and earlier versions
affected

Credits

Alain Mowat of Orange Cyberdefense, Switzerland. reporter

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018 vendor-advisory

cve.org (CVE-2024-53702)

nvd.nist.gov (CVE-2024-53702)

Download JSON