CVE-2023-34129

State: Published
Severity: Not scored
Published: Jul 13, 2023
Updated: Oct 30, 2024
Reserved: May 25, 2023

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Scores

The record has no CVSS score.

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
GMSSonicWall	9.3.2-SP1 and earlier versionsAffected
AnalyticsSonicWall	2.5.0.4-R7 and earlier versionsAffected

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010vendor-advisory
https://www.sonicwall.com/support/notices/230710150218060related

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.