Vulnerability Details CVE-2023-0126
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.925
EPSS Ranking 99.7%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-0126
-
cpe:2.3:h:sonicwall:sma1000:-
-
cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2