CVE-2023-34136

CVE-2023-34136

Vendor Sonicwall

Product GMS

Weakness CWE-434 · Unrestricted file upload

Published July 13, 2023

Last update October 30, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

October 30, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34136 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

Identifiers

CVE CVE-2023-34136

CWE CWE-434

Affected versions

Vendor Sonicwall

Product GMS

Affected 9.3.2-SP1 and earlier versions

Vendor Sonicwall

Product Analytics

Affected 2.5.0.4-R7 and earlier versions

01Description

02Disclosure timeline

03References

04Related CVE