CVE-2024-12806
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.64%
- CWE
- CWE-37
- Published
- 2025-01-09
- Last modified
- 2026-03-13
Affected products
- SonicWall SonicOS
- SonicWall SonicOS
- SonicWall SonicOS
- SonicWall SonicOS
Weakness type
Related vulnerabilities
- CVE-2023-20087 — Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
- CVE-2023-20077 — Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
- CVE-2022-20962 — A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could...
- CVE-2022-25347 — Delta Electronics DIAEnergie Path Traversal
- CVE-2018-10498 — This vulnerability allows local attackers to disclose sensitive information on vulnerable...