CVE-2023-34133highobserved exploitationCWE-89

CVE-2023-34133: high-severity vulnerability in SonicWall GMS

Published · Updated

Follow this CVE+ Monitor GMS+ Monitor Analytics

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

80Vexday Risk Score

Patch now. It exploitation observed in the wild and has a working public exploit.

ssvc Actcvss 7.5epss 73%
from disclosure to weaponsame day
Published on NVDJul 13
metasploitJul 12
Observed exploitation+126d
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
SonicWall · AnalyticsSonicWall · GMS
Related CVEs — SonicWall GMS

In the same product, most dangerous first.

CVE-2023-34127HIGHCVE-2023-34127EPSS 85.8%CVE-2023-34124CRITICALCVE-2023-34124EPSS 50.5%CVE-2023-34129—CVE-2023-34129EPSS 41.4%CVE-2023-34125—CVE-2023-34125EPSS 23.6%CVE-2023-34132—CVE-2023-34132EPSS 7.7%CVE-2026-66147CRITICALCVE-2026-66147EPSS 1.8%