{"id":"CVE-2023-0126","published":"2023-01-19T00:00:00Z","modified":"2025-04-03T19:57:28Z","title":"Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…","vendor":"SonicWall","product":"SonicWall SMA1000","tier":"core","eol":null,"affectedVersions":[{"vendor":"SonicWall","product":"SonicWall SMA1000","versions":["12.4.2"]}],"description":{"text":"Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a pre-authentication path traversal vulnerability in the SonicWall SMA1000 product, specifically in its firmware version 12.4.2. An unauthenticated remote attacker can read arbitrary files and directories stored outside the web root, requiring no authentication and no user interaction.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:16Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.72699,"percentile":0.99444,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-12216","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12216","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-0126","name":"SonicWall SMA1000 LFI","severity":"high","path":"http/cves/2023/CVE-2023-0126.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0126.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-01-19","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-0126","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":30.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9944"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}