HIGH🇬🇧 English

CVE-2023-44217

CVSS 7.8v3.1pub. 2023-10-03upd. 2024-11-21

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Sonicwall Netextender

    APP
    Sonicwall
    ≤ 10.2.336
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje

Powiązane podatności

CVE-2024-29014HIGH8.8ten sam produkt

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions all...

CVE-2023-44220HIGH7.3ten sam produkt

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order...

CVE-2023-44218HIGH8.8ten sam produkt

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the ...

CVE-2022-22281HIGH7.8ten sam produkt

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.32...

CVE-2020-5131HIGH7.8ten sam produkt

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to...