CVE-2023-34134

—

CVSS 3.1

6.5 medium

EPSS

1%p64

Published

Jul 13, 2023 (Jul 13, 2023)

Modified

Jun 17, 2026

Description

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Vendors: sonicwall
Products: analytics, global management system
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news2 stories

New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Vulnerability CVE-2023-34123 CVE-2023-34137 CVE-2023-34124+3 CVEs

SonicWall urges orgs to fix critical flaws in GMS/Analytics products

Security AffairsJul 13, 07:55 UTC · Jul 13, 2023Exploit / PoC CVE-2023-34124 CVE-2023-34134 CVE-2023-34137