CVE-2023-34129
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
The 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse directories and extract arbitrary files using the Zip Slip method, gaining access to the filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Risk Assessment
An attacker could access sensitive data on the filesystem, potentially leading to serious security breaches and data loss within the organization.
Recommendation
It is recommended to upgrade to the latest versions of SonicWall GMS and Analytics to mitigate this vulnerability and to conduct a security audit of the system.
Other vulnerabilities in SonicWall GMS i Analytics
See all- CVE-2023-34133High
CVE-2023-34133 describes an improper neutralization of special elements used in SQL commands, allowing an unauthenticated attacker to extract sensitive information from the SonicWall GMS and Analytics application database. This issue affects GMS versions 9.3.2-SP1 and earlier, and Analytics versions 2.5.0.4-R7 and earlier.
- CVE-2023-34132Critical
CVE-2023-34132 describes a vulnerability where the use of password hash instead of password for authentication in SonicWall GMS and Analytics allows for Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
- CVE-2023-34128Critical
The Tomcat application credentials are hardcoded in the SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
- CVE-2023-34135Medium
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
- CVE-2023-34134Medium
CVE-2023-34134 describes a vulnerability that exposes sensitive information, allowing an authenticated attacker to read the administrator password hash via a web service call in SonicWall GMS and Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
- CVE-2023-34131Medium
A vulnerability in SonicWall GMS and Analytics allows an unauthorized attacker to access restricted web pages. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.