{"uuid": "600f41af-7a79-46f8-87e3-74ae44e047d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34133", "type": "seen", "source": "https://t.me/hacking_Attack/109838", "content": "Black Hat Ethical Hacking\nSonicWall Warns of Critical Vulnerabilities in Firewall Management Software\n\nSonicWall Warns of Critical Vulnerabilities in Firewall Management SoftwarePost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nSonicWall has issued an urgent warning to its customers regarding critical vulnerabilities in its Global Management System (GMS) firewall management and Analytics network reporting engine software suites. The company has released patches for a total of 15 security flaws, including four that have been rated as CRITICAL and can potentially bypass authentication, leading to unauthorized access to sensitive information.\n\nThe identified vulnerabilities can be found in on-prem systems running GMS 9.3.2-SP1 or earlier and Analytics 2.5.0.4-R7 or earlier.\n\nThe list of critical vulnerabilities that admins should promptly address by upgrading to GMS 9.3.3 and Analytics 2.5.2 includes:\n\n* CVE-2023-34124: Web Service Authentication Bypass\n* CVE-2023-34133: Multiple Unauthenticated SQL Injection Issues & Security Filter Bypass\n* CVE-2023-34134: Password Hash Read via Web Service\n* CVE-2023-34137: CAS Authentication Bypass\n\nThreat actors can remotely exploit these vulnerabilities without requiring user interaction, posing a significant risk to organizations. Successful exploitation of the flaws allows unauthorized access to data that would typically be inaccessible, potentially compromising other user information and manipulating or deleting data within the compromised application.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nSonicWall strongly advises organizations using the affected GMS/Analytics On-Prem versions to upgrade immediately to the patched versions, namely GMS 9.3.3 and Analytics 2.5.2. By doing so, organizations can mitigate the risk of unauthorized access and protect their sensitive data.\n\nNo public reports of proof of concept (PoC) exploit code or active exploitation of these vulnerabilities have been detected prior to their disclosure and patching by SonicWall PSIRT. However, it is essential for organizations to remain proactive in securing their systems, given the history of SonicWall appliances being targeted in ransomware and cyber-espionage attacks.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor SonicWall\u2019s products are widely used by over 500,000 business customers across 215 countries and territories, including government agencies and major corporations globally. The company\u2019s prompt response in addressing these critical vulnerabilities demonstrates its commitment to ensuring the security and protection of its customers\u2019 valuable data. Organizations are strongly advised to apply the necessary patches and keep their systems up to date to safeguard against potential risks.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-5-300x150.png Hackers Weaponize Unpatched Microsoft Flaw to Target NATO Summit AttendeesJuly 12, 2023\n* https://www.blackhatethicalhacking.c[...]", "creation_timestamp": "2026-09-02T01:01:14.700231Z"}