Vulnerabilities (CVE)

Filtered by vendor Sonicwall Subscribe
Filtered by product Netextender
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6340 1 Sonicwall 2 Capture Client, Netextender 2024-02-05 N/A 5.5 MEDIUM
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.
CVE-2022-22281 1 Sonicwall 1 Netextender 2024-02-04 7.2 HIGH 7.8 HIGH
A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system.
CVE-2020-5147 1 Sonicwall 1 Netextender 2024-02-04 4.6 MEDIUM 5.3 MEDIUM
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.
CVE-2020-5131 1 Sonicwall 1 Netextender 2024-02-04 4.6 MEDIUM 7.8 HIGH
SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.
CVE-2015-4173 1 Sonicwall 1 Netextender 2024-02-04 6.9 MEDIUM N/A
Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.