5.3
Medium
CVE-2024-53702 Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN…
Description
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SMA100 | Versions not published | |
| sma100_firmware 10.2 | earliest → 10.2.1.13-72sv | No fix stated |
Other CVEs of SMA100
The 26 CVEs of SMA100 →
CVE-2025-40603
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,…
4.5
Medium
CVE-2025-32821
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin…
7.1
High
CVE-2025-32820
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal…
8.3
High
CVE-2025-32819
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…
8.8
High