Skip to content
OpenAdvisories
Medium · 4.9 CVE-2024-12806 EUVD-2024-51119GHSA-f6f8-8wvp-pj55

A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.

Published Jan 9, 2025 · Updated Jan 17, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: SonicOS Category: Network devices

Description

A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.

Affected products

VendorProductAffectedFixed
SonicWall SonicOS 6.5.4.15-117n and older versions, 7.0.1-5161 and older version, 7.1.2-7019, 8.0.0-8035 —

Advisories 1

References