CVE-2023-34130
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Risk Assessment
The use of an outdated encryption algorithm with a hardcoded key exposes the organization to the risk of unauthorized access to sensitive data. Potential attackers can easily break the encryption and gain access to confidential information.
Recommendation
It is recommended to upgrade to the latest versions of GMS and Analytics that do not use the outdated TEA algorithm. Additionally, consider implementing stronger encryption methods for protecting sensitive data.
Original NVD description (English source)
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.