Description (CNA)
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SonicWall / SonicOS | affected 7.1.1-7058 and older versions; affected 7.1.2-7019; affected 8.0.0-8035 |
CWE
CWE-338
References
ADP enrichment
No English description supplied.
No references supplied.