CVE-2023-34127highCWE-78

CVE-2023-34127: high-severity vulnerability in SonicWall GMS

Published · Updated

Follow this CVE+ Monitor GMS+ Monitor Analytics

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

58Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.8epss 86%
from disclosure to weaponsame day
Published on NVDJul 13
metasploitJul 12
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SonicWall · AnalyticsSonicWall · GMS
Related CVEs — SonicWall GMS

In the same product, most dangerous first.

CVE-2023-34133HIGHCVE-2023-34133EPSS 72.8%CVE-2023-34124CRITICALCVE-2023-34124EPSS 50.5%CVE-2023-34129—CVE-2023-34129EPSS 41.4%CVE-2023-34125—CVE-2023-34125EPSS 23.6%CVE-2023-34132—CVE-2023-34132EPSS 7.7%CVE-2026-66147CRITICALCVE-2026-66147EPSS 1.8%