Vulnerabilities fixed in Sonicwall

🗓️ 22 Aug 2023 00:00:00Reported by NCSCType

SonicWall fixed vulnerabilities in Global Management System and Analytics with updates addressing data manipulation, authentication bypass, and remote code execution.

Reporter	Title	Published	Views	Family All 161
ATTACKERKB	CVE-2023-34127	13 Jul 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, related to the lack of protection for administrative data, allows a hacker to read the administrator’s password hash.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, related to incorrect path name restrictions, allows attackers to read arbitrary files.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, which stems from the lack of restrictions on file downloads, allows attackers to upload files to the privileged file system.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is due to an incorrect restriction on the path to the restricted access directory. This allows attackers to read arbitrary files from the root privileged filesystem.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall system lies in the lack of restrictions on file downloads, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the lack of protection for the SQL query structure, which allows attackers to exploit the protected information.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SonicWall Analytics’ analytical service and the SonicWall Global Management System’s global network gateways, which exists due to the failure to take measures to neutralize special elements used in the operating system, allows attackers to execute arbitrary code with root privileges.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.	26 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system, related to the ability to bypass authentication due to a fundamental error, allows attackers to enhance their privileges.	26 Jul 202300:00	–	bdu_fstec

22 Aug 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.8

EPSS0.91322

SSVC