CVE-2023-34129Analytics Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying…
Published Jul 13, 2023 · Updated Oct 30, 2024
Key Facts
Patch in the next maintenance window- CVE-2023-34129 is a high-severity vulnerability (CVSS 8.8 v3.1) affecting Analytics (Sonicwall), Global Management System (Sonicwall), GMS.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 41% probability of exploitation in the next 30 days.
- Fixed versions are available, including Analytics <=2.5.0.4-r7, Global Management System 9.3.2, Analytics 2.5.0.4-r7.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
41%
Higher than 98.6% of all scored CVEs
Exploit maturity
None known
ATLAS score
41/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
None known
Public exploit code
0
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
- advisoryhttps://www.bleepingcomputer.com/news/security/sonicwall-warns-admins-to-patch-critical-auth-bypass-bugs-immediately/
- advisoryhttps://www.sonicwall.com/support/knowledge-base/urgent-security-notice-sonicwall-gms-analytics-impacted-by-suite-of-vulnerabilities/230710150218060/
- advisoryhttps://www.sonicwall.com/support/notices/230710150218060
- advisoryUSOM advisory
- advisoryhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34123
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Affected Products
6 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| AnalyticsSonicwall | >= 2.5.0.4-R7 and earlier versions | 2.5.0.4-r7 |
| Global Management SystemSonicwall | 9.3.2, 9.3.2-sp1 | 9.3.2 |
| GMS | >= 9.3.2-SP1 and earlier versions | n/a |
Patched Releases
Analytics
<=2.5.0.4-r7
Global Management System
9.3.2
Timeline
Publicly disclosed
Jul 13, 2023
Last updated
Oct 30, 2024
Weakness Type
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References
- advisorypsirt.global.sonicwall.com · SNWLID-2023-0010
- advisorybleepingcomputer.com · sonicwall-warns-admins-to-patch-critical-auth-b…
- advisorysonicwall.com · 230710150218060
- advisorysonicwall.com · 230710150218060
- advisoryUSOM advisory
FAQ
Common Questions.
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges.
Affected: Analytics (Sonicwall) versions >= 2.5.0.4-R7 and earlier versions; Global Management System (Sonicwall) versions 9.3.2, 9.3.2-sp1; GMS versions >= 9.3.2-SP1 and earlier versions. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Analytics <=2.5.0.4-r7, Global Management System 9.3.2, Analytics 2.5.0.4-r7.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2023-34129 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo