HIGH🇬🇧 English

CVE-2024-29014

CVSS 8.8v3.1pub. 2024-07-18upd. 2024-11-21

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Sonicwall Netextender

    APP
    Sonicwall
    < 10.2.341
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2023-44220HIGH7.3ten sam produkt

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order...

CVE-2023-44218HIGH8.8ten sam produkt

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the ...

CVE-2023-44217HIGH7.8ten sam produkt

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earl...

CVE-2022-22281HIGH7.8ten sam produkt

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.32...

CVE-2020-5131HIGH7.8ten sam produkt

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to...