Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductNetextender (f590106e-4929-535b-917b-7855b61cf951)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29014 vulnerable 2026-06-08 06:33:28.397411 Details available
Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.
Published: 2024-07-18T07:37:12.258Z
Updated: 2024-11-27T04:55:16.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6340 vulnerable 2026-06-08 06:19:46.987640 Details available
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.
Published: 2024-01-17T23:57:06.142Z
Updated: 2025-06-11T16:40:22.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44220 vulnerable 2026-06-08 06:12:39.602319 Details available
SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system.
Published: 2023-10-27T07:44:40.869Z
Updated: 2024-09-09T15:18:00.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44218 vulnerable 2026-06-08 06:12:39.597020 Details available
HIGH (8.8)
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.
Published: 2023-10-03T08:00:04.401Z
Updated: 2024-09-20T19:02:17.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44217 vulnerable 2026-06-08 06:12:39.596371 Details available
A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.
Published: 2023-10-03T07:54:14.937Z
Updated: 2024-09-20T18:42:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22281 vulnerable 2026-06-08 05:40:08.077449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5147 vulnerable 2026-06-08 05:26:41.455903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5131 vulnerable 2026-06-08 05:26:41.428898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4173 vulnerable 2026-06-08 05:06:39.326095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.