Security Alert (A22-10-13): Vulnerability in SonicWall Global Management System


 

Published on: 14 October 2022

Description:

SonicWall has released a security advisory to address a path traversal vulnerability in SonicWall GMS. A remote unauthenticated attacker could exploit the vulnerability by sending specially crafted requests to an affected system.

 

Affected Systems:

  • SonicWall Global Management System (GMS) prior to version 9.3.2

 

Impact:

Successful exploitation of the vulnerability could lead to information disclosure on the affected system.

 

Recommendation:

Software update for affected product is available. Administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20030


Tag: SonicWall , SonicWall GMS
Tags