Outdated Encryption in SonicWall GMS and Analytics Exposes Sensitive Data

CVE-2023-34130

Summary

SonicWall GMS and Analytics are impacted by a vulnerability stemming from the use of the outdated Tiny Encryption Algorithm (TEA) with a hardcoded key. This flaw puts sensitive data at risk, as the encryption method employed is inadequate and allows for potential exposure by malicious actors. Users of GMS versions 9.3.2-SP1 and earlier, along with Analytics versions 2.5.0.4-R7 and prior, should take immediate action to mitigate this security risk.

References