CVE-2023-44220CWE-427

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL…

published October 27, 2023

CVSS
—
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00294 · 21.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-10-27T07:44Z
EPSS history
Timeline
  • 27 OCT 07:44Z
    SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL…
    cvelistv5