exploit/multi/http/sonicwall_shell_injection_cve_2023_34124
weaponizedSonicwall
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-34133US | high7.5 | Exploit | ||
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sens… | ||||
| CVE-2023-34132US | critical9.8 | Exploit | ||
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier… | ||||
| CVE-2023-34127US | high8.8 | Exploit | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to… | ||||
| CVE-2023-34124US | critical9.8 | Exploit | ||
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier vers… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan