CVE-2023-34135: Path Traversal
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SonicWall GMSto a version that resolves this vulnerability.Fixed in 9.3.2-SP1 - Upgrade
Upgrade
SonicWall Analyticsto a version that resolves this vulnerability.Fixed in 2.5.0.4-R7
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-34135.
What is the severity level of CVE-2023-34135?
The severity level of CVE-2023-34135 is medium with a severity value of 6.5.
Which versions of SonicWall GMS and Analytics are affected by this vulnerability?
This vulnerability affects SonicWall GMS versions 9.3.2-SP1 and earlier, and SonicWall Analytics versions 2.5.0.4-R7 and earlier.
How can a remote authenticated attacker exploit this vulnerability?
A remote authenticated attacker can exploit this vulnerability by performing a path traversal attack through the web service, allowing them to read arbitrary files from the underlying file system.
Are there any references for more information about this vulnerability?
Yes, you can find more information about this vulnerability at the following links: [SonicWall PSIRT Advisory](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010) and [SonicWall Support Notices](https://www.sonicwall.com/support/notices/230710150218060).