CVE-2024-40762: Weak RNG
Published Jan 9, 2025
·Updated
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.
Affected Software
1 affected component
SonicWall SonicOS
Event History
Jan 8, 2025
News Published
via BleepingComputer·07:16 PM
News Published
via BleepingComputer·07:18 PM
Jan 9, 2025
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-40762?
CVE-2024-40762 is considered critical due to the potential for an attacker to bypass authentication.
2
How do I fix CVE-2024-40762?
To fix CVE-2024-40762, update your SonicWall SonicOS to the latest patched version immediately.
3
What software is affected by CVE-2024-40762?
SonicWall SonicOS is the affected software for CVE-2024-40762.
4
What type of vulnerability is CVE-2024-40762?
CVE-2024-40762 is a vulnerability related to the use of a cryptographically weak pseudo-random number generator.
5
Could CVE-2024-40762 lead to data breaches?
Yes, exploitation of CVE-2024-40762 could result in authentication bypass, potentially leading to unauthorized access and data breaches.