attack vector is adjacent; attack complexity is high; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
SonicWall GMS
Classified as
CWE-295 (Improper Certificate Validation)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
SonicWall
GMS
Subsystems
General OT
Sectors
Multiple
What to Know
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.
What to Do
Monitor SonicWall's web page for any future patch releases.