CVE-2023-34129: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote…

PriorityP269high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

42.91%

98.6th percentile

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sonicwall	analytics	<= 2.5.0.4-r7	—
sonicwall	analytics	—	—
sonicwall	global_management_system	< 9.3.2	9.3.2
sonicwall	global_management_system	—	—
sonicwall	gms	—	—
sonicwall	gms	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Vulnerability class is Path Traversal (Zip Slip) in SonicWall GMS and Analytics; monitor for authenticated requests that upload ZIP archives containing path-traversal sequences (e.g., '../../') to the GMS/Analytics application endpoints, which could result in arbitrary file writes outside the intended directory. ↗
→Scope detection to authenticated sessions targeting SonicWall GMS versions 9.3.2-SP1 and earlier, and Analytics versions 2.5.0.4-R7 and earlier. ↗

·Exploitation requires an authenticated session; unauthenticated attackers cannot directly trigger this vulnerability. ↗
·Successful exploitation results in file writes with root privileges, meaning any file on the underlying filesystem can be overwritten or created. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.