CVE-2024-53702 - AskarLabs CVE Database

CVE-2024-53702

Vendor Sonicwall

Product SMA100

Weakness CWE-338

Published December 5, 2024

Last update December 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.

Key dates

02Disclosure timeline

December 5, 2024 CVE published

December 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-53702 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/338.html

Related vulnerabilities

04Related CVE

CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions CVE-2024-58036 Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions CVE-2024-29868 Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation CVE-2024-57854 Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator CVE-2021-34430