Lucene search
HistoryJul 13, 2023 - 2:15 a.m.
CVE-2023-34130
cve-2023-34130
sonicwall
encryption
outdated
key
sensitive data
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
31.0%
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Affected configurations
Node
sonicwallanalyticsRange≤2.5.0.4-r7
ORsonicwallglobal_management_systemRange<9.3.2
ORsonicwallglobal_management_systemMatch9.3.2-
ORsonicwallglobal_management_systemMatch9.3.2sp1
Related
cvelist
cvelist
CVE-2023-34130
2023-07-13 01:06:27
cve
cve
CVE-2023-34130
2023-07-13 02:15:09
prion
prion
Hardcoded credentials
2023-07-13 02:15:00
attackerkb
attackerkb
CVE-2023-34127
2023-08-21 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
31.0%
Related for NVD:CVE-2023-34130