PT-2023-6720 · Sonicwall · Sonicwall Netextender Windows Client

Published 2023-10-25 · Updated 2023-11-07 · CVE-2023-44220

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Windows client versions 10.2.336 and earlier

Description The issue is related to a DLL Search Order Hijacking vulnerability in the start-up DLL component of the SonicWall NetExtender Windows client. This vulnerability can be exploited by a local attacker, potentially resulting in command execution on the target system. The vulnerability is also associated with insecure privilege management, which could allow an attacker to execute arbitrary commands.

Recommendations For versions 10.2.336 and earlier, as a temporary workaround, consider restricting access to the start-up DLL component until a patch is available. Additionally, ensure that the SonicWall NetExtender Windows client is configured to follow best practices for privilege management to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-07493

CVE-2023-44220

Affected Products

Sonicwall Netextender Windows Client

References · 7

• https://bdu.fstec.ru/vul/2023-07493 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0017 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-44220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44220 · Security Note
• https://vuldb.com/?id.243708 · Note
• https://t.me/cibsecurity/73043 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1717853263075180686 · Twitter Post