7.5 High

CVE-2023-0126 Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…

Description

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.

Affected products and versions

Product	Affected versions	Fixed in
SonicWall SMA1000	12.4.2	No fix stated

The 4 CVEs of SonicWall SMA1000 →

CVE-2022-22282 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource… Not rated CVE-2022-1702 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that… Not rated CVE-2022-1701 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption… Not rated

Do you use SonicWall SMA1000?

Track this CVE Watch SonicWall SMA1000 Check my SBOMs

cveye.io/en/cve/CVE-2023-0126

Timeline

Published January 19, 2023
Last modified April 3, 2025

References

psirt.global.sonicwall.com psirt.global.sonicwall.com

Track this CVE

CVE-2023-0126 Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…

Description

Affected products and versions

Other CVEs of SonicWall SMA1000