CVE-2023-34126 - AskarLabs CVE Database

CVE-2023-34126

Vendor Sonicwall

Product GMS

Weakness CWE-434 · Unrestricted file upload

Published July 13, 2023

Last update October 31, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

October 31, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34126 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Identifiers

CVE CVE-2023-34126

CWE CWE-434

Affected versions

Vendor Sonicwall

Product GMS

Affected 9.3.2-SP1 and earlier versions

Vendor Sonicwall

Product Analytics

Affected 2.5.0.4-R7 and earlier versions