CVE-2024-53702
MEDIUMDescription
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
Is your site exposed to CVE-2024-53702?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sonicwall | sma_200_firmware |
| sonicwall | sma_200 |
| sonicwall | sma_210_firmware |
| sonicwall | sma_210 |
| sonicwall | sma_400_firmware |
| sonicwall | sma_400 |
| sonicwall | sma_410_firmware |
| sonicwall | sma_410 |
| sonicwall | sma_500v_firmware |
| sonicwall | sma_500v |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-53702? +
How severe is CVE-2024-53702? +
What products are affected by CVE-2024-53702? +
How do I check if I'm vulnerable to CVE-2024-53702? +
Related Vulnerabilities
Guzzle OAuth Subscriber signs Guzzle requests using OAuth 1.0. Prior to 0.8.1, Nonce generation does not use sufficient entropy nor …
The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to …
Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform …
Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.
ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using …
Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt …