Vulnerabilities > CVE-2023-34132 - Unspecified vulnerability in Sonicwall Analytics and Global Management System

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

sonicwall

critical

NVD

Published: 2023-07-13

Updated: 2024-11-21

Summary

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Vulnerable Configurations

Part	Description	Count
Application	Sonicwall Sonicwall Global Management System - Sonicwall Global Management System 4.1 Sonicwall Global Management System 5.0 Sonicwall Global Management System 5.1 Sonicwall Global Management System 6.0 Sonicwall Global Management System 7.0 Sonicwall Global Management System 7.1 Sonicwall Global Management System 7.2 Sonicwall Global Management System 8.0 Sonicwall Global Management System 8.1 Sonicwall Global Management System 8.2 Sonicwall Global Management System 8.3 Sonicwall Global Management System 8.4 Sonicwall Global Management System 8.5 Sonicwall Global Management System 8.6 Sonicwall Global Management System 8.7 Sonicwall Global Management System 9.0 Sonicwall Global Management System 9.1 Sonicwall Global Management System 9.3 Sonicwall Global Management System 9.3.1 Sonicwall Global Management System 9.3.2 Sonicwall Analytics - Sonicwall Analytics 2.5.0.3 Sonicwall Analytics 2.5.0.4-R7	30

Summary

Vulnerable Configurations

References