Sonicwall
Sonicwall Netextender: vulnerabilidades y CVE
Sonicwall Netextender tiene 15 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses2
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-66153 | Alta (7) | 0.24% | — | 25 ago 2026 | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths. |
| CVE-2026-66152 | Alta (8.8) | 0.50% | — | 25 ago 2026 | A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. |
| CVE-2025-23010 | Alta (7.2) | 0.41% | — | 10 abr 2025 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths. |
| CVE-2025-23009 | Alta (7.2) | 0.37% | — | 10 abr 2025 | A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file deletion. |
| CVE-2025-23008 | Alta (7.2) | 0.35% | — | 10 abr 2025 | An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify configurations. |
| CVE-2025-23007 | Media (5.5) | 0.20% | — | 30 ene 2025 | A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation. |
| CVE-2024-29014 | Alta (8.8) | 1.9% | — | 18 jul 2024 | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update. |
| CVE-2023-6340 | Media (5.5) | 0.21% | — | 18 ene 2024 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by… |
| CVE-2023-44220 | Alta (7.3) | 0.29% | — | 27 oct 2023 | SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could… |
| CVE-2023-44218 | Alta (7.8) | 0.21% | — | 3 oct 2023 | A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE)… |
| CVE-2023-44217 | Alta (7.8) | 0.19% | — | 3 oct 2023 | A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality. |
| CVE-2022-22281 | Alta (7.8) | 0.49% | — | 13 may 2022 | A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows… |
| CVE-2020-5147 | Media (5.3) | 1.7% | — | 9 ene 2021 | SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall… |
| CVE-2020-5131 | Alta (7.8) | 0.55% | — | 17 jul 2020 | SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability… |
| CVE-2015-4173 | Media (6.9) | 2.1% | — | 26 ago 2015 | Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows… |