{"vulnerability": "CVE-2023-3413", "sightings": [{"uuid": "28da4bc5-6bd7-4407-97ae-609e8861c700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "MISP/4c646d49-6d4f-4410-a4f5-ac883578ffa7", "content": "", "creation_timestamp": "2024-02-22T15:07:29.000000Z"}, {"uuid": "18bed354-fde8-45b5-8b01-f6caae6a18fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "MISP/137d5839-d312-438d-a161-9e8a6f151459", "content": "", "creation_timestamp": "2024-02-22T15:07:29.000000Z"}, {"uuid": "520ebf57-2d8f-47de-9804-87d78a62319a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "791a3061-26bd-447b-b30f-13bdf673122a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "8d5d8487-1aae-4c8b-a2fb-f79035f09223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "b0fffc9e-2ce3-4674-a912-af7a815b75c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:54.000000Z"}, {"uuid": "c8be7af6-3169-416d-b714-f9afbe04be32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:54.000000Z"}, {"uuid": "ca8ab889-fbf0-4aa2-90a6-ba0325343d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "34d516ba-f449-4b11-8a4c-9a7c2e7a1545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "7dfb4ade-3562-4f01-8250-5ab110770f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "f4b4f576-275c-4d22-8366-91d15bc53da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-34133.yaml", "content": "", "creation_timestamp": "2025-10-14T09:30:41.000000Z"}, {"uuid": "13d8991b-d894-4d86-9579-8fc5dc11ed47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "2b955e81-581e-4a35-9e54-5576f1e64b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "79b1cad0-8d83-4b22-9230-c8da9b411c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb", "content": "", "creation_timestamp": "2023-09-08T10:11:37.000000Z"}, {"uuid": "0c39c917-6c21-42ca-91ef-1c781bfe5523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb", "content": "", "creation_timestamp": "2023-09-08T10:11:37.000000Z"}, {"uuid": "74c04b7f-07f3-4e26-9570-a9a495555370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "f042a79c-30ac-40d2-af85-9b923c9d9625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "b7d3946b-eea9-4c08-8e55-911dd534730f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "content": "", "creation_timestamp": "2025-12-20T00:00:00.000000Z"}, {"uuid": "493a4ce8-8210-466a-9502-3a6efd5b0ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "7f329903-c312-454b-b8cc-33a99a4a424d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "82a58ec2-3ec9-4e70-bf00-56bb888836df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "cebd486e-9c5c-4534-9934-e8856f09e421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "Telegram/RO-3KQYYmJp6rc3OyQ2a4C_Dza1Efh5pGtP13e3EKmucFw", "content": "", "creation_timestamp": "2023-07-13T09:12:22.000000Z"}, {"uuid": "fdb7138a-be8b-4a4d-bdec-5308c92ce6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/KomunitiSiber/480", "content": "New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products\nhttps://thehackernews.com/2023/07/new-vulnerabilities-disclosed-in.html\n\nSonicWall on Wednesday urged customers of Global Management System (GMS) firewall management and Analytics network reporting engine software to apply the latest fixes to secure against a set of 15 security flaws that could be exploited by a threat actor to circumvent authentication and access sensitive information.\nOf the 15 shortcomings (tracked from CVE-2023-34123 through CVE-2023-34137), four", "creation_timestamp": "2023-07-13T10:11:28.000000Z"}, {"uuid": "828b6523-2847-49b4-ad9f-815872ada966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/true_secator/4611", "content": "SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c Global Management System (GMS) \u0438 \u041f\u041e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 Analytics.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 15 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c GMS 9.3.2-SP1 \u0438 Analytics 2.5.0.4-R7 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0443 \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a: CVE-2023-34124 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u0430), CVE-2023-34133 (\u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2023-34134 (\u0447\u0442\u0435\u043d\u0438\u0435 \u0445\u044d\u0448\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u0443) \u0438 CVE-2023-34137 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CAS).\n\nSonicWall PSIRT \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u043d\u0438\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u044e GMS/Analytics On-Prem,\u00a0\u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412\u0435\u0434\u044c, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0443\u0436\u0435 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (HelloKitty, FiveHands) \u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0418 \u043d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, SonicWall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 500 000 \u0431\u0438\u0437\u043d\u0435\u0441-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 215 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.", "creation_timestamp": "2023-07-13T15:09:07.000000Z"}, {"uuid": "2277a3c6-4935-407d-82d1-d425610cf20d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34134", "type": "seen", "source": "https://t.me/true_secator/4611", "content": "SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c Global Management System (GMS) \u0438 \u041f\u041e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 Analytics.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 15 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c GMS 9.3.2-SP1 \u0438 Analytics 2.5.0.4-R7 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0443 \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a: CVE-2023-34124 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u0430), CVE-2023-34133 (\u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2023-34134 (\u0447\u0442\u0435\u043d\u0438\u0435 \u0445\u044d\u0448\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u0443) \u0438 CVE-2023-34137 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CAS).\n\nSonicWall PSIRT \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u043d\u0438\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u044e GMS/Analytics On-Prem,\u00a0\u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412\u0435\u0434\u044c, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0443\u0436\u0435 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (HelloKitty, FiveHands) \u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0418 \u043d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, SonicWall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 500 000 \u0431\u0438\u0437\u043d\u0435\u0441-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 215 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.", "creation_timestamp": "2023-07-13T15:09:07.000000Z"}, {"uuid": "c9f7aa80-f6ae-4ca7-a91d-334d9a665f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/true_secator/4611", "content": "SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c Global Management System (GMS) \u0438 \u041f\u041e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 Analytics.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 15 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c GMS 9.3.2-SP1 \u0438 Analytics 2.5.0.4-R7 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0443 \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a: CVE-2023-34124 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u0430), CVE-2023-34133 (\u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2023-34134 (\u0447\u0442\u0435\u043d\u0438\u0435 \u0445\u044d\u0448\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u0443) \u0438 CVE-2023-34137 (\u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CAS).\n\nSonicWall PSIRT \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u043d\u0438\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u044e GMS/Analytics On-Prem,\u00a0\u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412\u0435\u0434\u044c, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0443\u0436\u0435 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 (HelloKitty, FiveHands) \u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0418 \u043d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, SonicWall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 500 000 \u0431\u0438\u0437\u043d\u0435\u0441-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 215 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.", "creation_timestamp": "2023-07-13T15:09:07.000000Z"}, {"uuid": "ed58a7ea-9dda-48a4-a65a-2ce3b1453845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3413", "type": "seen", "source": "https://t.me/cibsecurity/71263", "content": "\u203c CVE-2023-3413 \u203c\n\nAn issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through a fork created before changing visibility to only project members.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T12:37:42.000000Z"}, {"uuid": "e5eb6d37-0067-4cc6-8dfb-0389a6ae8283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/cibsecurity/66629", "content": "\u203c CVE-2023-34137 \u203c\n\nSonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T09:58:30.000000Z"}, {"uuid": "76aab319-d3f2-4c22-b182-68c727aaf976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34130", "type": "seen", "source": "https://t.me/cibsecurity/66612", "content": "\u203c CVE-2023-34130 \u203c\n\nSonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T07:42:14.000000Z"}, {"uuid": "e1de23d9-f966-4b5c-bfe0-310d62e87935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34131", "type": "seen", "source": "https://t.me/cibsecurity/66622", "content": "\u203c CVE-2023-34131 \u203c\n\nExposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access restricted web pages. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T07:45:22.000000Z"}, {"uuid": "d531d6a6-a314-43cb-b953-1241797f27c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "16fe3d57-905c-41a3-a31b-51811106b6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "5b16ff5b-effd-45f7-ab93-a8e4db269585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "20a7fd67-9d63-4013-b568-da08ceba5e84", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82703c2e-b6e0-4e67-87b3-25fda4f5c648", "content": "", "creation_timestamp": "2026-06-19T12:46:01.975084Z"}, {"uuid": "bcde611f-82be-4f7b-8592-6a207cb23f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:15:09.713119Z"}, {"uuid": "d916d77f-a12e-4e0d-9fa4-0e6414486580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "content": "", "creation_timestamp": "2026-06-22T00:00:00.000000Z"}, {"uuid": "42db053a-d5ea-4b22-85d0-3321a012d017", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1aecc1a2-67c2-43d7-b07a-c3b8dae45463", "content": "", "creation_timestamp": "2026-06-23T14:03:25.413220Z"}, {"uuid": "8bac5849-2de3-4bb4-8e85-f8199adfce52", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f36afc1-8154-467e-99cb-20cd6db3cf2d", "content": "", "creation_timestamp": "2026-06-30T09:22:51.942572Z"}, {"uuid": "0d33d1a5-b61d-4891-b454-0c3fcd05dd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:12.564856Z"}, {"uuid": "a5f5da4e-cef0-4a15-9ed7-4288bed8110f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:51:45.260377Z"}, {"uuid": "d184ed01-7028-46cd-89d4-579da3851c39", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5898da30-b551-4571-be16-146d7a2ed28c", "content": "", "creation_timestamp": "2026-08-27T13:00:30.436408Z"}, {"uuid": "2a7e6bfc-e87f-47dd-ae7f-75e68fec3b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:07.542814Z"}, {"uuid": "ebc87b57-5654-47bd-bdb8-642289cebb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-01T20:00:54.238991Z"}, {"uuid": "fe5f006f-7d1c-4ea8-8eff-342f0b9a2f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-01T20:00:54.279690Z"}, {"uuid": "ae84d0b2-0323-42f8-ace7-c6208910eff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34134", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-01T20:00:54.532619Z"}, {"uuid": "bfda5fdd-1222-4c06-a035-8705e75becf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34134", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-02T01:01:15.070593Z"}, {"uuid": "600f41af-7a79-46f8-87e3-74ae44e047d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-02T01:01:14.700231Z"}, {"uuid": "411331b0-01ce-4d57-8c6c-69c7978eb000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-02T01:01:14.755098Z"}, {"uuid": "5648da13-dadc-4bda-b968-3efc820dc35a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34134", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-04T11:00:04.530456Z"}, {"uuid": "a8b595f6-59c6-4fc1-baaa-06aa6e3977a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-04T11:00:04.590886Z"}, {"uuid": "f4ab63cf-0e58-4478-9b14-29dd295b30e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-04T11:00:04.661378Z"}, {"uuid": "28b66a4c-2ade-4d70-90cc-a15094422880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34134", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-05T01:00:31.533900Z"}, {"uuid": "753daf34-13b0-40ab-9ba6-8afadbd62cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-05T01:00:31.587944Z"}, {"uuid": "1f711f59-d31d-4d1e-9749-03385ce123b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34137", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-05T01:00:31.639047Z"}, {"uuid": "a7acad2e-68ba-48d1-b1c4-b01ec83a751e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.480228Z"}, {"uuid": "7d04d6cf-375e-41f9-8d87-db976d0708b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34132", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb", "content": "{\"aliases\": [], \"arch\": \"x64, cmd\", \"author\": [\"fulmetalpackets \", \"Ron Bowes \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a series of vulnerabilities - including auth\\n          bypass, SQL injection, and shell injection - to obtain remote code\\n          execution on SonicWall GMS versions <= 9.9.9320.\", \"disclosure_date\": \"2023-07-12\", \"fullname\": \"exploit/multi/http/sonicwall_shell_injection_cve_2023_34124\", \"is_install_path\": true, \"mod_time\": \"2023-09-06 14:11:29 +0000\", \"name\": \"Sonicwall\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/sonicwall_shell_injection_cve_2023_34124\", \"references\": [\"URL-https://www.rapid7.com/blog/post/2023/07/13/etr-sonicwall-recommends-urgent-patching-for-gms-and-analytics-cves/\", \"CVE-2023-34124\", \"CVE-2023-34133\", \"CVE-2023-34132\", \"CVE-2023-34127\"], \"rport\": \"443\", \"session_types\": false, \"targets\": [\"Linux Dropper\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:12.685045Z"}, {"uuid": "a010c3bc-4cdf-4229-9db7-1cf62ccb71a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb", "content": "{\"aliases\": [], \"arch\": \"x64, cmd\", \"author\": [\"fulmetalpackets \", \"Ron Bowes \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a series of vulnerabilities - including auth\\n          bypass, SQL injection, and shell injection - to obtain remote code\\n          execution on SonicWall GMS versions <= 9.9.9320.\", \"disclosure_date\": \"2023-07-12\", \"fullname\": \"exploit/multi/http/sonicwall_shell_injection_cve_2023_34124\", \"is_install_path\": true, \"mod_time\": \"2023-09-06 14:11:29 +0000\", \"name\": \"Sonicwall\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/sonicwall_shell_injection_cve_2023_34124\", \"references\": [\"URL-https://www.rapid7.com/blog/post/2023/07/13/etr-sonicwall-recommends-urgent-patching-for-gms-and-analytics-cves/\", \"CVE-2023-34124\", \"CVE-2023-34133\", \"CVE-2023-34132\", \"CVE-2023-34127\"], \"rport\": \"443\", \"session_types\": false, \"targets\": [\"Linux Dropper\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:12.824178Z"}]}