Lucene search
K

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is exposed due to an incorrect restriction on the path to the restricted access catalog. This allows a hacker to extract arbitrary files with root privileges.

🗓️ 26 Jul 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

SonicWall Analytics and Global Management System expose remote root file access via catalog path.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2023-34127
13 Jul 202300:00
attackerkb
CNNVD
SonicWALL Analytics和GMS 路径遍历漏洞
13 Jul 202300:00
cnnvd
CVE
CVE-2023-34129
13 Jul 202301:03
cve
Cvelist
CVE-2023-34129
13 Jul 202301:03
cvelist
NCSC
Vulnerabilities fixed in Sonicwall
22 Aug 202300:00
ncsc
NVD
CVE-2023-34129
13 Jul 202302:15
nvd
OSV
CVE-2023-34129
13 Jul 202302:15
osv
Prion
Path traversal
13 Jul 202302:15
prion
Positive Technologies
PT-2023-3808 · Sonicwall · Sonicwall Gms +1
12 Jul 202300:00
ptsecurity
Vulnrichment
CVE-2023-34129
13 Jul 202301:03
vulnrichment
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Jul 2023 00:00Current
7.8High risk
Vulners AI Score7.8
CVSS 38.8
CVSS 29
EPSS0.42911
1