VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Apr 23, 2025

CVE-2023-34133

CVE-2023-34133

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

2
  • SonicWall/Analyticsv5
    Range: 2.5.0.4-R7 and earlier versions
  • SonicWall/GMScpe-rescue
    Range: 9.3.2-SP1 and earlier versions

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.