{"id":"CVE-2023-34127","published":"2023-07-13T00:47:58Z","modified":"2025-04-23T16:20:27Z","title":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…","vendor":"SonicWall","product":"GMS","tier":"core","eol":null,"affectedVersions":[{"vendor":"SonicWall","product":"GMS","versions":["9.3.2-SP1 and earlier versions"]},{"vendor":"SonicWall","product":"Analytics","versions":["2.5.0.4-R7 and earlier versions"]}],"description":{"text":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.","provenance":"source","from":"CVE.org"},"summary":{"text":"An OS command injection flaw in SonicWall GMS, including its SonicWall Analytics component, allows arbitrary commands to be run when special characters are not properly neutralised. An attacker who is authenticated over the network with low privileges and no user interaction can execute arbitrary code with root privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:50Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.85811,"percentile":0.99727,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","tags":["vendor-advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","tags":["related"]},{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-38229","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38229","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"metasploit":[{"name":"Sonicwall","module":"exploit/multi/http/sonicwall_shell_injection_cve_2023_34124","type":"exploit","disclosureDate":"2023-07-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb"}],"first":{"date":"2023-07-12","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html"],"flow":[],"timeline":[{"date":"2023-07-12","kind":"exploit-public","label":"First public exploit: Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_shell_injection_cve_2023_34124.rb","provenance":"source"},{"date":"2023-07-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-34127","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":31.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.95,"detail":"percentile 0.9973"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}