PatchTheCVECVE-2024-53702: Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLV
CVE-2024-53702 is a medium-severity flaw (CVSS 5.3) affecting sma 200 firmware, sma 210 firmware, sma 400 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 73%) |
| CISA exploited list | No |
| Weakness | CWE-338 |
| Published | 2024-12-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-53702?
sma 200 firmware: upgrade to 10.2.1.14-75sv; sma 210 firmware: upgrade to 10.2.1.14-75sv; sma 400 firmware: upgrade to 10.2.1.14-75sv. Exact commands for each OS are on this page.
Is CVE-2024-53702 being exploited?
CVE-2024-53702 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-53702 affect?
CVE-2024-53702 affects sma 200 firmware, sma 210 firmware, sma 400 firmware. Severity is medium (CVSS 5.3). Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
How urgent is CVE-2024-53702?
Priority 30/100. Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2025-32821 HIGH 7.2 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin p
- CVE-2025-32820 HIGH 8.8 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path
- CVE-2025-32819 HIGH 8.8 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the pat
- CVE-2024-53703 HIGH 8.1 UPGRADE UPGRADE A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library
- CVE-2024-45319 MEDIUM 6.3 UPGRADE UPGRADE A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote