CVE-2023-34136

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Score

CVSS 3.1 9.8 Critical

Status

Modified - PSIRT@sonicwall.com

Published

2023-07-13

Last modified

2024-10-30

Weaknesses

CWE-434

Affected products

• Analytics (Sonicwall)
• Global Management System (Sonicwall)
• Gms (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
• https://www.sonicwall.com/support/notices/230710150218060