CVE-2023-44220

CVSS V2 None CVSS V3 None

Description

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system.

Overview

CVE ID
CVE-2023-44220

Assigner
sonicwall

Vulnerability Status
PUBLISHED

Published Version
2023-10-27T07:44:40.869Z

Last Modified Date
2023-10-27T07:44:40.869Z

Weakness Enumerations

CWE	URL
CWE-427	http://cwe.mitre.org/data/definitions/427.html

References

Reference URL	Reference Tags
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0017	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-44220
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44220

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:10:20				Added to TrackCVE