CVE-2023-34136

CRITICAL
STIX 2.1 vulnerability

Record summary

CVE-2023-34136 has a selected CVSS score of 9.8 (critical).

Description

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 30, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Analytics

Browse SonicWall / Analytics

Default status: unknown

CVE List2.5.0.4-R7 and earlier versionsaffected

GMS

Browse SonicWall / GMS

Default status: unknown

CVE List9.3.2-SP1 and earlier versionsaffected

References

3