attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
SonicWall Global Management System (GMS)
Classified as
CWE-636 (Not Failing Securely ('Failing Open'))
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
SonicWall
Global Management System (GMS)
Subsystems
General OT
Sectors
Multiple
What to Know
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
What to Do
Monitor SonicWall's web page for any future patch releases.