NE
Product
NetExtender
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 2Low 0
Watch
Add NetExtender to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-66152 | 8.8 | Aug 25 | A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root Affected: 10.3.5 and earlier versions |
| CVE-2024-29014 | 8.8 | Jul 18 | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC… Affected: before 10.2.341 |
| CVE-2023-44218 | 7.8 | Oct 3 | A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading… Affected: through 10.2.336 |
| CVE-2023-44217 | 7.8 | Oct 3 | A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system… Affected: through 10.2.336 |
| CVE-2022-22281 | 7.8 | May 13 | A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute… Affected: through 10.2.322 |
| CVE-2020-5131 | 7.8 | Jul 17 | SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host… Affected: through 9.0.815 |
| CVE-2023-44220 | 7.3 | Oct 27 | SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component Affected: through 10.2.336 |
| CVE-2026-66153 | 7.0 | Aug 25 | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths Affected: 10.3.5 and earlier versions |
| CVE-2023-6340 | 5.5 | Jan 18 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver Affected: through 10.2.337 |
| CVE-2020-5147 | 5.3 | Jan 9 | SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system Affected: through 10.2.300 |
| CVE-2015-4173 | – | Aug 26 | Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before… Affected: before 7.5.227; 8.0 before 8.0.238 |
Showing 11