CVE-2023-0126

7.5 highEPSS 73%

High (7.5) in sonicwall sma1000 firmware. EPSS 73% chance of exploitation in the next 30 days.

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 73% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:sma1000_firmware

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001

Check your stack JSON