Lucene search

SonicwallCVE-2024-29014

HistoryJul 18, 2024 - 8:15 a.m.

CVE-2024-29014

2024-07-1808:15:02

CWE-94

sonicwall

web.nvd.nist.gov

sonicwall

netextender

windows

vulnerability

epc client

code execution

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

18.9%

JSON

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

Affected configurations

Nvd

Node

sonicwallnetextenderRange<10.2.341windows

VendorProductVersionCPE
sonicwallnetextender*cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
sonicwall	netextender	*	cpe:2.3:a:sonicwall:netextender::::::windows::*

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Windows",
      "64 bit",
      "32 bit",
      "SMA100"
    ],
    "product": "NetExtender",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.339 and earlier versions"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

18.9%

JSON

Related for CVE-2024-29014