CVE-2023-34123 Hardcoded credentials in Analytics
Attackers can exploit hard-coded cryptographic keys in SonicWall GMS and Analytics to bypass security controls and access sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-34123?
CVE-2023-34123 is a high-severity vulnerability in SonicWall Analytics, published on 12 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Which versions are affected by CVE-2023-34123?
It affects 2 products.
Products include Sonicwall Analytics, Sonicwall Global Management System.
How do I fix CVE-2023-34123?
No fix has been published for CVE-2023-34123 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-34123 being exploited?
There is no known exploitation of CVE-2023-34123 in the wild and no public exploit code.
Other vulnerabilities in SonicWall Analytics
Sources
Also known as GHSA-35qj-2v2r-6c2g.