vulnerability

SonicWall GMS: CVE-2023-34134: Password Hash Read via Web Service

Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Jul 12, 2023
Added
Jul 12, 2023
Modified
Jul 27, 2023

Description

Exposure of Sensitive Information to an Unauthorized Actor in SonicWall GMS product results in Password Hash Read via Web Service. This vulnerability impacts GMS versions 9.3.2-SP1 and before

Solution

sonicwall-gms-upgrade-9-3
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.