SonicWall GMS unauthenticated file read flaw (end-of-life)
Internal files in SonicWall's firewall management program can be peeked at!
Summary
SonicWall GMS 9.5.2 and earlier let an unauthenticated network attacker read internal GMS files, potentially exposing sensitive information. The product is end-of-life, so no fix will be released.
Affected when
- GMS 9.5.2 and earlier versions
- attacker has network access
What to do
No fix is available because the product is end-of-life. The vendor advises upgrading to SonicWall Network Security Manager (NSM).
Products and platforms
CVE IDs
Sources
- Advisory: psirt.global.sonicwall.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen