CVE-2023-34137

CriticalCVSS 9.8

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

55th percentile - higher than 55% of all known CVEs

Summary

The SonicWall GMS and Analytics CAS Web Services application uses static values for authentication without proper checks, leading to an authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to data breaches or other serious security incidents.

Recommendation

It is recommended to upgrade to the latest versions of GMS and Analytics that address this vulnerability and to implement additional security measures to protect against unauthorized access.

Original NVD description (English source)

SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.