CVE-2023-34136
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious files, potentially leading to further attacks on the organization's systems. This poses a serious threat to the integrity and security of data.
Recommendation
It is recommended to update to the latest versions of GMS and Analytics to mitigate this vulnerability. Additionally, monitoring systems for unauthorized activities is advised.
Original NVD description (English source)
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.