CVE-2023-34132: SonicWall Analytics

Critical severity, CVSS 9.8. EPSS: 7.7% chance of exploitation in the next 30 days.

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

• SonicWall Analytics: up to and including 2.5.0.4-r7
• SonicWall Global Management System: before 9.3.2 (fixed in 9.3.2); version 9.3.2 only

Published 2023-07-13. Last modified 2026-06-17.