Description
Sonicwall SMA1000系列产品是SonicWall 公司应用于企业管理安全接入的安全防护产品。SMA1000 固件版本 12.4.2 中的预身份验证路径遍历漏洞，允许未经身份验证的攻击者访问存储在 Web 根目录之外的任意文件和目录。
SonicWall SMA1000 /images 目录遍历漏洞 （CVE-2023-0126）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-0126
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001
https://www.sonicwall.com/support/notices/pre-authentication-path-traversal-vulnerability-in-sma-1000-12-4-2-firmware/kA1VN0000000RBX0A2
https://0xnehru.medium.com/cve-2023-0126-sonicwall-sma1000-pre-auth-path-traversal-vulnerability-and-remediation-dfe949358f30
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0126.yaml
https://pentest-tools.com/vulnerabilities-exploits/sonicwall-sma1000-lfi_2490
https://s4e.io/tools/sonicwall-sma1000-lfi-cve-2023-0126
https://www.youtube.com/watch?v=r02UWI_2VRw