CVE-2023-34128

Summary

CVE-2023-34128 is a new vulnerability that affects SonicWall's GMS (Global Management System) and Analytics. The issue stems from hardcoded Tomcat application credentials in their configuration files. These versions are impacted: GMS - 9.3.2-SP1 and earlier; Analytics - 2.5.0.4-R7 and earlier. An attacker who gains unauthorized access could potentially exploit these credentials to compromise the affected systems, leading to serious security implications. Organizations using these versions of SonicWall's GMS and Analytics are urged to update to the latest patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.