Lucene search
K

69 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:33 a.m.3 views

CVE-2019-7476

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

8.1CVSS7.2AI score0.00447EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/17 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-34124

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

9.8CVSS5.8AI score0.91322EPSS
In wildExploits2References179
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-17018

Malware in sbrugna...

8.1CVSS8.1AI score0.00447EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/01 12:0 a.m.2 views

SonicWALL GMS 安全漏洞

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

7.5CVSS7.7AI score0.00061EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/01 12:0 a.m.4 views

SonicWALL GMS 安全漏洞

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

7.1CVSS7.6AI score0.00087EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network firewall management system, stems from the rigid encoding of application Tomcat’s configuration files. This allows attackers to exploit their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network management system is related to the rigid encoding of application Tomcat’s configuration files. Exploiting this vulnerability can allow a malicious actor to increase their...

7.8CVSS7.7AI score0.0028EPSS
Exploits0References4Affected Software2
NCSC
NCSC
added 2023/08/22 12:0 a.m.5 views

Vulnerabilities fixed in Sonicwall

SonicWall has fixed vulnerabilities in Global Management System GMS and Analytics. A malicious party could exploit them to launch attacks that could result in the following categories of damage: Manipulation of data. Bypassing authentication Circumvention of security measure Remote code execution...

9.8CVSS8.2AI score0.91322EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network gatekeeper system, allows a hacker to execute arbitrary code.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to authentication bypass. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.00081EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network gatekeeper system, allows attackers to compromise data integrity.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrit...

7.8CVSS7.4AI score0.00133EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.2 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system, related to the ability to bypass authentication due to a fundamental error, allows attackers to enhance their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the ability to bypass authentication due to a fundamental error. Exploiting this vulnerability can allow attackers operating...

10CVSS7.4AI score0.91322EPSS
Exploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall system lies in the lack of restrictions on file downloads, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the lack of restrictions on file downloads. Exploiting this vulnerability could allow a malicious actor to compromise the...

7.8CVSS7.5AI score0.00513EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the lack of protection for the SQL query structure, which allows attackers to exploit the protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the lack of protection for the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose protecte...

7.8CVSS7.7AI score0.65195EPSS
Exploits2References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.2 views

The vulnerability of SonicWall Analytics’ analytical service and the SonicWall Global Management System’s global network gateways, which exists due to the failure to take measures to neutralize special elements used in the operating system, allows attackers to execute arbitrary code with root privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS exists because measures are not taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with...

7.8CVSS8.2AI score0.90578EPSS
Exploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, which stems from the lack of restrictions on file downloads, allows attackers to upload files to the privileged file system.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the lack of restrictions on file upload. Exploiting this vulnerability allows a malicious actor to upload files to the file system with root privilege...

9CVSS7.5AI score0.00383EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is exposed due to an incorrect restriction on the path to the restricted access catalog. This allows a hacker to extract arbitrary files with root privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to retrieve...

9CVSS7.8AI score0.31365EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gai...

5.3CVSS5.9AI score0.00516EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of a password hash instead of a password for authentication. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows a malicious actor to compromise the...

10CVSS7.7AI score0.70255EPSS
Exploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.4 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of cryptographic algorithms with hard-programmed keys for encryption. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of cryptographic algorithms for encryption with a hard-programmed key. Exploiting this vulnerability could allow an attacker, operating...

7.8CVSS7.3AI score0.00147EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.2 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, related to incorrect path name restrictions, allows attackers to read arbitrary files.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files through the...

7.8CVSS6.7AI score0.00228EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.1 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways, related to the lack of protection for administrative data, allows a hacker to read the administrator’s password hash.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the lack of protection for administrative data. Exploiting this vulnerability allows a malicious actor to read the administrator’s password hash throu...

6.8CVSS7.2AI score0.00433EPSS
Exploits0References4Affected Software2
Rows per page
Query Builder