CVE-2023-0126 - AskarLabs CVE Database

CVE-2023-0126

Vendor Sonicwall

Product SonicWall SMA1000

Weakness CWE-22 · Path traversal

Published January 19, 2023

Last update April 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.

Key dates

02Disclosure timeline

January 19, 2023 CVE published

April 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-0126 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image CVE-2024-45188 Mage AI file content request remote arbitrary file leak CVE-2022-39367 Vulnerability in handling of uploaded QTI ZIP files CVE-2026-57079 Net::BitTorrent versions through 2.0.1 for Perl write files outside the download directory via path traversal in peer-supplied metadata CVE-2025-34047 Leadsec VPN Path Traversal Arbitrary File Read