7.2
Élevée
CVE-2025-23010 An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and…
Description
An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NetExtender | Versions non publiées |
Autres CVE de NetExtender
Les 11 CVE de NetExtender →
CVE-2026-66153
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows…
7.0
Élevée
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker…
8.8
Élevée
CVE-2025-23009
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an…
7.2
Élevée
CVE-2025-23008
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a…
7.2
Élevée