LiveActive security incident?Get immediate response
CVE Record

CVE-2001-0376: SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow...

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysis

Security readout for executives and security teams

This old SonicWALL issue weakens VPN pre-shared key protection on specific Tele2 and SOHO firewalls running firmware 6.0.0.0. The device supports only 48-byte IKE pre-shared keys rather than the intended 128 bytes, making brute-force attacks less costly than administrators may expect. Exposure is likely limited to legacy SonicWALL Tele2 or SOHO deployments running firmware 6.0.0.0 with IPsec/IKE pre-shared key authentication enabled. Organizations without these devices or without PSK-based IPsec are unlikely to be affected based on the provided sources. Treat this as a legacy VPN exposure review rather than an emergency unless affected devices are still internet-facing. Priority should rise if these firewalls protect remote access or site-to-site VPNs for sensitive environments. Mitigation focus: Identify any SonicWALL Tele2 or SOHO devices still in service.; Check whether firmware 6.0.0.0 is running on those devices.; Review vendor guidance for corrected firmware, replacement, or supported mitigation..

Prepared

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2001-0376 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.