Lucene search

[email protected]CVE-2023-34123

HistoryJul 13, 2023 - 12:15 a.m.

CVE-2023-34123

2023-07-1300:15:24

CWE-798

CWE-321

[email protected]

web.nvd.nist.gov

In Wild

cve-2023-34123

hard-coded cryptographic key

sonicwall gms

sonicwall analytics

nvd

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

JSON

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected configurations

NVD

Node

sonicwallglobal_management_systemRange<9.3.2virtual_appliance

sonicwallglobal_management_systemRange<9.3.2windows

sonicwallglobal_management_systemMatch9.3.2-virtual_appliance

sonicwallglobal_management_systemMatch9.3.2-windows

sonicwallglobal_management_systemMatch9.3.2sp1virtual_appliance

sonicwallglobal_management_systemMatch9.3.2sp1windows

Node

sonicwallanalyticsRange<2.5.0.4

sonicwallanalyticsMatch2.5.0.4-r7

CPENameOperatorVersion
sonicwall:global_management_systemsonicwall global management systemlt9.3.2

CPE	Name	Operator	Version
sonicwall:global_management_system	sonicwall global management system	lt	9.3.2

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "GMS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.3.2-SP1 and earlier versions"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "product": "Analytics",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "2.5.0.4-R7 and earlier versions"
      }
    ]
  }
]