CVE-2023-34133

HIGHNuclei

SonicWall analytics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-34133 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 16, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Analytics

Browse SonicWall / Analytics

Default status: unknown

CVE List, VulnCheck2.5.0.4-R7 and earlier versionsaffected

GMS

Browse SonicWall / GMS

Default status: unknown

CVE List9.3.2-SP1 and earlier versionsaffected

Proofs of concept

1

Catalogued exploits

MetasploitSonicwallMetasploit exploitby Ron Bowes <rbowes@rapid7.com> +1 moreNot analyzed1 file

Ruby · linked to 4 vulnerabilities

Metasploit
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHSonicWall GMS and Analytics - SQL InjectionCVSS 7.5

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Impact

Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the target system.

Remediation

Apply the latest security patches or updates provided by SonicWall to mitigate this vulnerability.

WeaknessesCWE-89
Authorstheamanrawat
Template tagscve2023cvesonicwallsqliinjectionvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:"-1381126564"
FOFA: icon_hash="-1381126564"
https://raw.githubusercontent.com/rapid7/metasploit-framework/4b130f5be7590d04878f3bda37555e59e733324d/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb https://www.sonicwall.com/support/product-notification/urgent-security-notice-sonicwall-gms-analytics-impacted-by-suite-of-vulnerabilities/230710150218060/ https://github.com/getdrive/PoC/blob/main/2023/Sonicwall_Shell_Injection/sonicwall_shell_injection_cve_2023_34124.rb https://nvd.nist.gov/vuln/detail/CVE-2023-34133 http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html

Source: ProjectDiscovery

References

4