Lucene search

K
nvd[email protected]NVD:CVE-2023-34123
HistoryJul 13, 2023 - 12:15 a.m.

CVE-2023-34123

2023-07-1300:15:24
CWE-321
CWE-798
web.nvd.nist.gov
2
sonicwall
gms
analytics
cryptographic key
vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

19.7%

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected configurations

NVD
Node
sonicwallglobal_management_systemRange<9.3.2virtual_appliance
OR
sonicwallglobal_management_systemRange<9.3.2windows
OR
sonicwallglobal_management_systemMatch9.3.2-virtual_appliance
OR
sonicwallglobal_management_systemMatch9.3.2-windows
OR
sonicwallglobal_management_systemMatch9.3.2sp1virtual_appliance
OR
sonicwallglobal_management_systemMatch9.3.2sp1windows
Node
sonicwallanalyticsRange<2.5.0.4
OR
sonicwallanalyticsMatch2.5.0.4-r7

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

19.7%

Related for NVD:CVE-2023-34123