Security Resilience

CVE-2023-34132

Sonicwall Global Management System ≤ 9.3.2

Public PoC
Published
13 July 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.077 95th percentile
Risk Priority 96 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-34132 is a critical-severity Use of Password Hash Instead of Password for Authentication (CWE-836) vulnerability in Sonicwall Global Management System. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Pass the Hash (T1550.002); ranked in the top 5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2023-34132 is a use of password hash instead of password for authentication vulnerability that permits Pass-the-Hash attacks. It affects SonicWall GMS versions 9.3.2-SP1 and earlier as well as Analytics versions 2.5.0.4-R7 and earlier. The flaw carries a CVSS 3.1 score of 9.8 and is tracked under CWE-836.

An unauthenticated attacker can exploit the issue remotely over the network to obtain full control over confidentiality, integrity, and availability of the affected management or analytics platform. Successful Pass-the-Hash abuse allows an adversary to authenticate using captured credential hashes without knowing the underlying passwords.

SonicWall has published vendor advisories SNWLID-2023-0010 and associated support notices that address the vulnerability and direct customers to remediation steps. Public exploit material referencing remote code execution against the affected versions has also appeared on PacketStorm.

The EPSS score stands at 0.7026 with an identical recorded peak, indicating sustained exploitation interest since disclosure.

EU & UK References

Vulnerability Data

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

CWE(s)
CWE-836NVD-CWE-Other

Related Threats

MITRE ATT&CK Enterprise Techniques

T1550.002 Pass the Hash Lateral Movement
Adversaries may “pass the hash” using stolen password hashes to move laterally within an environment, bypassing normal system access controls.
attack.mitre.org →
T1003.007 Proc Filesystem Credential Access
Adversaries may gather credentials from the proc filesystem or `/proc`.
attack.mitre.org →
T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
attack.mitre.org →
T1007 System Service Discovery Discovery
Adversaries may try to gather information about registered local system services.
attack.mitre.org →
T1014 Rootkit Stealth
Adversaries may use rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.
attack.mitre.org →
T1016 System Network Configuration Discovery Discovery
Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2023-34135Same product: Sonicwall Analytics
CVE-2023-34126Same product: Sonicwall Analytics
CVE-2023-34133Same product: Sonicwall Analytics
CVE-2023-34136Same product: Sonicwall Analytics
CVE-2023-34137Same product: Sonicwall Analytics
CVE-2023-34123Same product: Sonicwall Analytics
CVE-2023-34124Same product: Sonicwall Analytics
CVE-2023-34134Same product: Sonicwall Analytics
CVE-2023-34130Same product: Sonicwall Analytics
CVE-2023-34125Same product: Sonicwall Analytics

Affected Assets

sonicwall
analytics
≤ 2.5.0.4-r7
sonicwall
global management system
9.3.2 · ≤ 9.3.2

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 partial match
blocks

Proper authentication mechanisms require passwords (not pre-hashed values) to be supplied by the claimant and verified server-side.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.5.17 Authentication information partial match
degrades

Directly requires secure handling and protection of authentication credentials, preventing storage or comparison of password hashes as if they were passwords.

A.8.24 Use of cryptography partial match
degrades

Requires proper cryptographic practices for protecting passwords, indirectly mitigating misuse of hashes in authentication.

A.8.26 Application security requirements partial match
removes
A.8.27 Secure system architecture and engineering principles partial match
removes
A.8.28 Secure coding partial match
prevents

Secure coding guidance can prevent this implementation error but does not address the control's broader intent.

A.8.5 Secure authentication partial match
blocks

A.8.5 chooses and strengthens authentication techniques (including MFA, log-on hardening, and brute-force protection) but never addresses storing or comparing a password hash in place of the actual password; the weakness can still be present and exploitable when the control is fully met.

References