CVE-2023-34136

Description

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Reserved 2023-05-25 | Published 2023-07-13 | Updated 2024-10-30 | Assigner sonicwall

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Default status
unknown

9.3.2-SP1 and earlier versions
affected

Default status
unknown

2.5.0.4-R7 and earlier versions
affected

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory

www.sonicwall.com/support/notices/230710150218060 related

cve.org (CVE-2023-34136)

nvd.nist.gov (CVE-2023-34136)

Download JSON