Sign in

7.2 High

CVE-2025-23008 An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a…

Description

An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify configurations.

Affected products and versions

Product	Affected versions	Fixed in
NetExtender	Versions not published

The 11 CVEs of NetExtender →

CVE-2026-66153 The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows… 7.0 High CVE-2026-66152 A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker… 8.8 High CVE-2025-23010 An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and… 7.2 High CVE-2025-23009 A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an… 7.2 High

Do you use NetExtender?

Track this CVE Watch NetExtender Check my SBOMs

cveye.io/en/cve/CVE-2025-23008

Timeline

Published April 10, 2025
Last modified April 10, 2025

References

psirt.global.sonicwall.com psirt.global.sonicwall.com

Track this CVE