CVE-2024-53702 - CVE House
Back to Database
Status published Unknown CVE-2024-53702

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in...

Vulnerability Description

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-53702

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Alain Mowat of Orange Cyberdefense, Switzerland.

References

More from SonicWall

View All →
CVE-2025-40605
A Path Traversal vulnerability has been identified in the Email...
Unknown 0
CVE-2025-40604
Download of Code Without Integrity Check Vulnerability in the SonicWall...
Unknown 0
CVE-2025-40603
A potential exposure of sensitive information in log files in...
Unknown 0
CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in...
Unknown 0
CVE-2025-40601
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service...
Unknown 0

Affected Vendor

Affected Software

SMA100
Vulnerable Versions:
10.2.1.13-72sv and earlier versions

Timeline

Official Publish: December 5th, 2024
Last Modified: December 5th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-338

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.