Lucene search
+L

62 matches found

OSV
OSV
added 2023/10/03 8:15 a.m.5 views

CVE-2023-44217

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality...

7.8CVSS5.8AI score0.00178EPSS
Exploits0References2
OSV
OSV
added 2023/10/03 8:15 a.m.5 views

CVE-2023-44218

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation LPE vulnerability...

7.8CVSS5.8AI score0.00202EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/03 8:0 a.m.14 views

CVE-2023-44218

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation LPE vulnerability...

8.8CVSS7.1AI score0.00202EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.5 views

SonicWALL NetExtender Security Vulnerabilities

SonicWALL NetExtender is a software application from SonicWALL USA that allows remote users to connect to remote networks in a secure manner. Provides simple and secure access for Windows and Linux users. A security vulnerability exists in SonicWall NetExtender that stems from a local elevation o...

8.8CVSS6.8AI score0.00202EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.6 views

SonicWALL NetExtender Security Vulnerabilities

SonicWALL NetExtender is a software application from SonicWALL USA that allows remote users to connect to remote networks in a secure manner. Provides simple and secure access for Windows and Linux users. A security vulnerability exists in SonicWALL NetExtender that stems from the presence of a...

7.8CVSS7AI score0.00178EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/29 12:0 a.m.5 views

PT-2023-5680 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender affected versions not specified Description: A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges,...

8.8CVSS7.7AI score0.00202EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2022/05/13 8:15 p.m.8 views

CVE-2022-22281

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client 32 and 64 bit in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system...

7.8CVSS7.1AI score0.00474EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/05/09 12:0 a.m.6 views

SonicWALL NetExtender Windows client 安全漏洞

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL, Inc. A security vulnerability exists in SonicWALL SSL-VPN NetExtender Windows Client 32 and 64 bit version 10.2.322 and prior versions, which originates from a boundary error...

7.8CVSS7.3AI score0.00474EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/10 12:0 a.m.9 views

SonicWall NetExtender Installed (Windows)

Binary data sonicwallnetextenderwininstalled.nbin...

7.3AI score
Exploits0References1
Packet Storm
Packet Storm
added 2021/08/17 12:0 a.m.240 views

SonicWall NetExtender 10.2.0.300 Unquoted Service Path

Exploit Title: SonicWall NetExtender 10.2.0.300 - Unquoted Service Path Exploit Author: shinnai Software Link: https://www.sonicwall.com/products/remote-access/vpn-clients/ Version: 10.2.0.300 Tested On: Windows CVE: CVE-2020-5147...

5.3CVSS0.5AI score0.01658EPSS
Exploits4
OSV
OSV
added 2021/01/09 1:15 a.m.5 views

CVE-2020-5147

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier...

5.3CVSS6.3AI score0.01658EPSS
Exploits4References2
SonicWall
SonicWall
added 2021/01/09 12:18 a.m.11 views

SonicWall NetExtender windows client unquoted service path vulnerability

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier. CVE: CVE-2020-5147 Last...

5.3CVSS5.3AI score0.01658EPSS
Exploits4
CNNVD
CNNVD
added 2021/01/08 12:0 a.m.7 views

Sonicwall SonicWall NetExtender Windows client Code Issue Vulnerability

Sonicwall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from Sonicwall, Inc. A security vulnerability exists in SonicWall NetExtender Windows client version 10.2.300 and earlier, the source of which allows a local attacker to gain elevated...

5.3CVSS6AI score0.01658EPSS
Exploits4References4
CNVD
CNVD
added 2020/07/29 12:0 a.m.3 views

SonicWall NetExtender Windows client input validation error vulnerability

SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWall USA. An input validation error vulnerability exists in SonicWall NetExtender Windows client version 9.0.815 and earlier. A local attacker can exploit the vulnerability by...

7.8CVSS7AI score0.00548EPSS
Exploits0References1
OSV
OSV
added 2020/07/17 6:15 p.m.2 views

CVE-2020-5131

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier...

7.8CVSS6AI score
Exploits0References1
Cvelist
Cvelist
added 2020/07/17 5:15 p.m.19 views

CVE-2020-5131

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier...

7.8AI score0.00548EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.23 views

Dell SonicWall NetExtender Privilege Escalation Vulnerability - Windows

Dell SonicWall NetExtender is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.9CVSS9.7AI score0.02066EPSS
Exploits0References1
Prion
Prion
added 2015/08/26 7:59 p.m.21 views

Design/Logic Flaw

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

6.9CVSS7AI score0.02066EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2015/08/26 7:0 p.m.55 views

CVE-2015-4173

Dell SonicWall NetExtender is affected by CVE-2015-4173, a local privilege-escalation due to an unquoted Windows search path in the autorun value. Affected as: NetExtender before 7.5.227 and 8.0.x before 8.0.238, used with SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv. Root cause: ...

6.9CVSS8.7AI score0.02066EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/08/26 7:0 p.m.23 views

CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

8.9AI score0.02066EPSS
Exploits0References4
Rows per page
Query Builder