SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

SonicWall has announced that it will not provide patches for two vulnerabilities found in its end-of-life Global Management System. The vulnerabilities affect SonicWall GMS version 9.5.2 and earlier versions. One of the security flaws is an unauthenticated file read vulnerability that could allow an attacker to read internal GMS files if they have network access. This particular vulnerability has a CVSS score of 9.1, indicating a high level of severity. The vulnerabilities could potentially expose files and alter database records. SonicWall has identified the unauthenticated file read vulnerability with a specific designation.