Read the docs

SonicWall

Records284All Threatist records
Exploited (KEV)24In CISA KEV
CVSS critical65CVSS 9.0–10.0
CVSS high124CVSS 7.0–8.9

Exploited now

SonicWall records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Netextender · all components

TI-2024-19198 CVE-2024-29014 · GHSA-gg23-w2rg-qj4q

Code injection in SonicWall NetExtender

Priority HIGH 73

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01864 Published 2024-07-18 No fix listed CWE-94
Priority LOW 39

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vul…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00215 Published 2023-10-03 No fix listed CWE-267
Priority LOW 35

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2023-10-03 No fix listed CWE-269
Priority LOW 35

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00505 Published 2022-05-13 No fix listed CWE-121
Priority LOW 34

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0032 Published 2023-10-27 No fix listed CWE-427
Priority LOW 34

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00462 Published 2020-07-17 No fix listed CWE-20
Priority LOW 34

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows l…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.02066 Published 2015-08-26 No fix listed CWE-428
Priority LOW 24

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2024-01-17 No fix listed CWE-121
Open these records in search →