CVE-2023-34123 - Vulnerability Details - OpenCVE

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Sonicwall	Analytics Global Management System

Configuration 1 [-]

OR	cpe:2.3:a:sonicwall:global_management_system:::::virtual_appliance:::*
	cpe:2.3:a:sonicwall:global_management_system:::::windows:::*
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:::virtual_appliance:::*
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:::windows:::*
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:::virtual_appliance:::*
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:::windows:::*

Configuration 2 [-]

OR	cpe:2.3:a:sonicwall:analytics::::::::
	cpe:2.3:a:sonicwall:analytics:2.5.0.4-r7:::::::*

No data.

References

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
https://www.sonicwall.com/support/notices/230710150218060

History

Wed, 06 Nov 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: sonicwall

Published: 2023-07-12T23:16:31.146Z

Updated: 2024-11-06T17:01:05.956Z

Reserved: 2023-05-25T22:45:46.850Z

Link: CVE-2023-34123

Vulnrichment

Updated: 2024-08-02T16:01:54.020Z

NVD

Status : Modified

Published: 2023-07-13T00:15:24.387

Modified: 2024-11-21T08:06:35.690

Link: CVE-2023-34123

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-34123", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2023-05-25T22:45:46.850Z", "datePublished": "2023-07-12T23:16:31.146Z", "dateUpdated": "2024-11-06T17:01:05.956Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "GMS", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "9.3.2-SP1 and earlier versions"}]}, {"defaultStatus": "unknown", "product": "Analytics", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "2.5.0.4-R7 and earlier versions"}]}], "datePublic": "2023-07-12T23:07:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.<p></p>"}], "value": "Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-321", "description": "CWE-321 Use of Hard-coded Cryptographic Key", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2023-07-13T00:22:30.529Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"tags": ["related"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:01:54.020Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"tags": ["related", "x_transferred"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-06T17:00:38.382269Z", "id": "CVE-2023-34123", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-06T17:01:05.956Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://www.sonicwall.com/support/notices/230710150218060", "tags": ["related", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:01:54.020Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-34123", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-06T17:00:38.382269Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-06T17:01:00.527Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "SonicWall", "product": "GMS", "versions": [{"status": "affected", "version": "9.3.2-SP1 and earlier versions"}], "defaultStatus": "unknown"}, {"vendor": "SonicWall", "product": "Analytics", "versions": [{"status": "affected", "version": "2.5.0.4-R7 and earlier versions"}], "defaultStatus": "unknown"}], "datePublic": "2023-07-12T23:07:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010", "tags": ["vendor-advisory"]}, {"url": "https://www.sonicwall.com/support/notices/230710150218060", "tags": ["related"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n", "supportingMedia": [{"type": "text/html", "value": "Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.<p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-321", "description": "CWE-321 Use of Hard-coded Cryptographic Key"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2023-07-13T00:22:30.529Z"}}}, "cveMetadata": {"cveId": "CVE-2023-34123", "state": "PUBLISHED", "dateUpdated": "2024-11-06T17:01:05.956Z", "dateReserved": "2023-05-25T22:45:46.850Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2023-07-12T23:16:31.146Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:virtual_appliance:*:*:*", "matchCriteriaId": "12CB3495-2949-4D79-98F9-2156B0296C94", "versionEndExcluding": "9.3.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:windows:*:*:*", "matchCriteriaId": "6215D18A-7254-453B-93BF-4FFD8417D0AB", "versionEndExcluding": "9.3.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:virtual_appliance:*:*:*", "matchCriteriaId": "9F193D8D-EC75-49E4-9510-74534518A276", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:windows:*:*:*", "matchCriteriaId": "7D33D05B-F776-44C7-BE77-B0656C9449A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:virtual_appliance:*:*:*", "matchCriteriaId": "C00FB351-6120-4C1B-B621-2D7C1ED13966", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:windows:*:*:*", "matchCriteriaId": "654B1441-A169-499C-B061-8E49535FC60D", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "3141B9EA-D34E-4F30-B4D8-413505FBEC53", "versionEndExcluding": "2.5.0.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:analytics:2.5.0.4-r7:*:*:*:*:*:*:*", "matchCriteriaId": "8C05380F-06DD-40DE-B5F3-E6E2E188D229", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}], "id": "CVE-2023-34123", "lastModified": "2024-11-21T08:06:35.690", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-13T00:15:24.387", "references": [{"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}], "sourceIdentifier": "PSIRT@sonicwall.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-321"}], "source": "PSIRT@sonicwall.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}