Lucene search
HistoryJan 19, 2023 - 8:15 p.m.
CVE-2023-0126
vulnerability
pre-authentication
path traversal
sma1000
firmware
version 12.4.2
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.6
Confidence
High
EPSS
0.166
Percentile
96.1%
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.
Affected configurations
Node
sonicwallsma1000Match-
sonicwallsma1000_firmwareMatch12.4.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sonicwall | sma1000 | - | cpe:2.3:h:sonicwall:sma1000:-:*:*:*:*:*:*:* |
| sonicwall | sma1000_firmware | 12.4.2 | cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2023-01-19 20:15:00
cvelist
cvelist
CVE-2023-0126
2023-01-19 00:00:00
cve
cve
CVE-2023-0126
2023-01-19 20:15:10
nuclei
nuclei
SonicWall SMA1000 LFI
2023-06-27 20:15:29
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.6
Confidence
High
EPSS
0.166
Percentile
96.1%
Related for NVD:CVE-2023-0126