CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - PSIRT@sonicwall.com

Published

2025-01-09

Last modified

2025-01-09

Weaknesses

CWE-338

Affected products

• Sonicos (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003