Lucene search

SonicwallCVE-2023-44217

HistoryOct 03, 2023 - 8:15 a.m.

CVE-2023-44217

2023-10-0308:15:36

CWE-269

sonicwall

web.nvd.nist.gov

sonicwall

net extender

msi

windows

cve-2023-44217

vulnerability

local privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.

Affected configurations

Nvd

Node

sonicwallnetextenderRange≤10.2.336windows

VendorProductVersionCPE
sonicwallnetextender*cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
sonicwall	netextender	*	cpe:2.3:a:sonicwall:netextender::::::windows::*

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Windows"
    ],
    "product": "NetExtender",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.336 and earlier versions"
      }
    ]
  }
]

References

github.com/advisories/GHSA-jw5c-8746-98g5

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-44217