CVE-2023-34134

MediumCVSS 6.5

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.17%

63th percentile - higher than 63% of all known CVEs

Summary

CVE-2023-34134 describes a vulnerability that exposes sensitive information, allowing an authenticated attacker to read the administrator password hash via a web service call in SonicWall GMS and Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Risk Assessment

The exposure of the administrator password may lead to unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest versions of SonicWall GMS and Analytics to mitigate this vulnerability.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.