CVE-2024-53702

mediumpriority · track · 0EPSS 0.003 · 27 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.33% (27th) EPSS

CVSS 5.3 · medium

Is it mine?

16 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondaryexploitability 3.9 · impact 1.4

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-338USCWE-338USCWE-338US

affected products (16)

Products and version ranges known to be affected.

SonicWall SMA 100 Series <10.2.1.14-75svall versionscert_bundDE
SonicWall SMA≤ 100 Series <10.2.1.14-75svcert_bundDE
SonicWall SMA100≤ 10.2.1.13-72sv and earlier versionsenisa_euvdEU
SonicWall SMA 100≤ 10.2.1.13-72svfstec_bduRU
SonicWall SMA 200≤ 10.2.1.13-72svfstec_bduRU
SonicWall SMA 210≤ 10.2.1.13-72svfstec_bduRU
SonicWall SMA 400≤ 10.2.1.13-72svfstec_bduRU
SonicWall SMA 410≤ 10.2.1.13-72svfstec_bduRU
SonicWall SMA 500v≤ 10.2.1.13-72svfstec_bduRU
sma100all versionsncsc_nlNLcpe:2.3:a:sonicwall:sma100:*:*:*:*:*:*:*:*
sonicwall sma100 firmwareall versionsncsc_nlNLcpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*
sonicwall sma 200 firmware< 10.2.1.14-75svnvdUScpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*
sonicwall sma 210 firmware< 10.2.1.14-75svnvdUScpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*
sonicwall sma 400 firmware< 10.2.1.14-75svnvdUScpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*
sonicwall sma 410 firmware< 10.2.1.14-75svnvdUScpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*
sonicwall sma 500v firmware< 10.2.1.14-75svnvdUScpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2024-0464Kwetsbaarheden verholpen in SonicWall SMA100 SSLVPNNL2024-12-06csaf · ncsc_nlNL
SonicWall heeft kwetsbaarheden verholpen in de SMA100 SSLVPN (Specifiek voor firmware versies 10.2.1.13-72sv en eerder).
WID-SEC-W-2024-3623SonicWall SMA: Mehrere SchwachstellenDeutsch2024-12-05csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in SonicWall SMA ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2024-12-05modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan