NetSight
critical9.8

CVE-2023-34130

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data.

Impact

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

VendorProductAffected versions
SonicwallAnalytics
through 2.5.0.4-r7
SonicwallGlobal Management System
before 9.3.2
Version 9.3.2

Weakness classification

References