Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-44220


SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system.


Published

2023-10-27T08:15:31.207

Last Modified

2024-11-21T08:25:28.140

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.3 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-427
  • Type: Primary
    CWE-427

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sonicwall netextender ≤ 10.2.336 Yes

References