CVE-2023-34130

CVE-2023-34130

Vendor Sonicwall
Product GMS
Weakness CWE-327 · Broken crypto
Published July 13, 2023
Last update October 30, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published
October 30, 2024 Record updated