CVE-2023-34130

Name of the Vulnerable Software and Affected Versions SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier

Description The issue is related to the use of outdated cryptographic algorithms with hardcoded keys for encryption in SonicWall GMS and Analytics. This could allow a remote attacker to impact the integrity of protected information. The Tiny Encryption Algorithm (TEA) is specifically mentioned as the outdated algorithm used.

Recommendations For SonicWall GMS versions 9.3.2-SP1 and earlier, consider updating to a version that uses secure encryption algorithms. For SonicWall Analytics versions 2.5.0.4-R7 and earlier, consider updating to a version that uses secure encryption algorithms. As a temporary workaround, consider restricting access to sensitive data encrypted with the outdated TEA algorithm until a patch is available.