PT-2023-5681 · Sonicwall · Sonicwall Net Extender Msi Client

Published 2023-09-29 · Updated 2024-09-20 · CVE-2023-44217

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall Net Extender MSI client for Windows versions 10.2.336 and earlier

Description A local privilege escalation issue in the SonicWall Net Extender MSI client allows a local low-privileged user to gain system privileges through running repair functionality. This is related to insecure privilege management. The exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations For versions 10.2.336 and earlier, as a temporary workaround, consider disabling the repair functionality until a patch is available. Restrict access to the affected MSI client to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2023-06349

CVE-2023-44217

GHSA-JW5C-8746-98G5

Affected Products

Sonicwall Net Extender Msi Client

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-44217 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06349 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44217 · Vendor Advisory
• https://twitter.com/CVEnew/status/1709121326596706685 · Twitter Post
• https://t.me/cvenotify/58995 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023093012 · Note
• https://github.com/advisories/GHSA-jw5c-8746-98g5 · Note
• https://twitter.com/VulmonFeeds/status/1709157200826913074 · Twitter Post
• https://t.me/cvenotify/95514 · Telegram Post