QwikSec

Security Database

CVE

CWE

Training

CVE-2023-44220

Published: Oct 27, 2023

Modified: Sep 9, 2024

PUBLISHED

Description

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system.

Vendor	Product	Versions
SonicWall	NetExtender	affected `10.2.336 and earlier versions`

Weaknesses (CWE)

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0017

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.