SonicWall GMS/Analytics Unauth Upload to Restricted Dir Before 9.3.2-SP1
CVE-2023-34136 Published on July 13, 2023
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Weakness Type
What is an Unrestricted File Upload Vulnerability?
The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
CVE-2023-34136 has been classified to as an Unrestricted File Upload vulnerability or weakness.
Products Associated with CVE-2023-34136
stack.watch emails you whenever new vulnerabilities are published in SonicWall Global Management System or SonicWall Analytics. Just hit a watch button to start following.
Affected Versions
SonicWall GMS:- Version 9.3.2-SP1 and earlier versions is affected.
- Version 2.5.0.4-R7 and earlier versions is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.