CVE-2023-34129

Deeper analysis

CVE-2023-34129 is a path traversal vulnerability (CWE-22) present in SonicWall Global Management System (GMS) 9.3.2-SP1 and earlier as well as Analytics 2.5.0.4-R7 and earlier. The flaw stems from improper pathname limitation that permits use of the Zip Slip technique, enabling an authenticated remote attacker to write arbitrary files to any location on the underlying filesystem with root privileges. The issue carries a CVSS 3.1 base score of 8.8 reflecting network attack vector, low complexity, and low-privileged authentication requirements that result in complete loss of confidentiality, integrity, and availability.

An authenticated remote attacker can supply a crafted archive to the affected management or analytics application and cause extraction of its contents outside the intended directory. Successful exploitation grants the ability to overwrite or place files anywhere on the system, including sensitive configuration files, binaries, or scripts that run with root privileges, thereby allowing full compromise of the host.

SonicWall has published advisory SNWLID-2023-0010 and an accompanying support notice detailing the affected versions and remediation steps. The current EPSS score of 0.3136 (peak 0.3331) indicates moderate but not widespread exploitation interest since disclosure.