Skip to content

Known vulnerabilities in SonicWall Analytics

Is your version affected?

CVE Summary Score Published
CVE-2023-34137 SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks… Not rated Jul 13, 2023
CVE-2023-34136 Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location… Not rated Jul 13, 2023
CVE-2023-34135 Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary… Not rated Jul 13, 2023
CVE-2023-34134 Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows… Not rated Jul 13, 2023
CVE-2023-34133 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS… 7.5 High Jul 13, 2023
CVE-2023-34132 Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows… Not rated Jul 13, 2023
CVE-2023-34131 Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an… Not rated Jul 13, 2023
CVE-2023-34130 SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data Not rated Jul 13, 2023
CVE-2023-34129 Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and… Not rated Jul 13, 2023
CVE-2023-34128 Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file Not rated Jul 13, 2023
CVE-2023-34127 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall… 8.8 High Jul 13, 2023
CVE-2023-34126 Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying… Not rated Jul 13, 2023
CVE-2023-34125 Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the… Not rated Jul 13, 2023
CVE-2023-34124 The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing… 9.8 Critical Jul 13, 2023
CVE-2023-34123 Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics Not rated Jul 12, 2023

Other SonicWall products