CVE-2023-34127
Assigner: sonicwall
Published: 2023-07-13T00:47:58.798Z
State: PUBLISHED
affected: defaultStatus: unknown
product: GMS
vendor: SonicWall
versions: status: affected
version: 9.3.2-SP1 and earlier versions
defaultStatus: unknown
product: Analytics
vendor: SonicWall
versions: status: affected
version: 2.5.0.4-R7 and earlier versions
datePublic: 2023-07-12T23:07:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
value: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
problemTypes: descriptions: cweId: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev