Lucene search
+L

2093 matches found

SonicWall
SonicWall
added 2025/04/16 12:30 p.m.90 views

SonicWall Connect Tunnel Windows Client Improper Link Resolution Vulnerability

A Improper Link Resolution vulnerability CWE-59 in the SonicWall Connect Tunnel Windows 32 and 64 bit Client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption. CVE: CVE-2025-32817 Last updated: April 16, 2025, 12:30 p.m...

6.1CVSS6.6AI score0.00352EPSS
SaveExploits0
CISA
CISA
added 2025/04/16 12:00 p.m.14 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-20035link is external SonicWall SMA100 Appliances OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyb...

6.8CVSS7.8AI score0.04181EPSS
SaveIn wildExploits0References6
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.9 views

PT-2025-16879 · Sonicwall · Sonicwall Connect Tunnel

Name of the Vulnerable Software and Affected Versions: SonicWall Connect Tunnel Windows client affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability, which can result in unauthorized file overwrite. This potentially leads to denial of servi...

6.1CVSS6.4AI score0.00352EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

SonicWALL Connect Tunnel 安全漏洞

SonicWALL Connect Tunnel is a remote software from SonicWALL USA. A security vulnerability exists in SonicWALL Connect Tunnel that stems from improper link resolution, which could result in file overwriting or denial of service...

6.1CVSS7AI score0.00352EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2025/04/16 12:00 a.m.28 views

SonicWall SMA100 Appliances OS Command Injection Vulnerability

SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution...

6.8CVSS8AI score0.04181EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2025/04/15 12:00 a.m.4 views

VulnCheck KEV: CVE-2021-20035

SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution...

6.8CVSS6.1AI score0.04181EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.17 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to gain access to modify data.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify data...

7.2CVSS7.1AI score0.0035EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.20 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to upload any files they want.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to upload arbitrary files...

6.5CVSS7.2AI score0.00415EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.18 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to delete any files they want.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete any files they desire...

5.9CVSS7.1AI score0.00371EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/12 7:49 p.m.47 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/12 7:47 p.m.46 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

7.2CVSS7.1AI score0.00371EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/12 7:45 p.m.56 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

7.2CVSS6.8AI score0.0035EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/10 7:16 p.m.45 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

7.2CVSS0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 7:16 p.m.33 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

7.2CVSS0.00371EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 7:16 p.m.47 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 6:57 p.m.45 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 6:57 p.m.13 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

6.8AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 6:57 p.m.69 views

CVE-2025-23010

SonicWall NetExtender Windows client (32/64-bit) is affected by CVE-2025-23010: an Improper Link Resolution Before File Access (Link Following) vulnerability that can allow an attacker to manipulate file paths. Concrete details in connected sources indicate affected versions include 10.3.1 and ea...

7.2CVSS6.5AI score0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 6:55 p.m.40 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 6:55 p.m.10 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

5.9AI score0.00371EPSS
SaveExploits0References1
Rows per page
Query Builder