PT-2024-5391 · Sonicwall · Sonicwall Netextender+1

Published 2024-03-14 · Updated 2024-12-04 · CVE-2024-29014

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall NetExtender versions 10.2.339 and earlier

Description The issue is related to incorrect code generation management in the Enable Client Autoupdate service of the Remote Access End Point Control (EPC) in SonicWall NetExtender. This can allow a remote attacker to execute arbitrary code when processing an EPC Client update. The vulnerability is associated with the SonicWall SMA 100 and can be exploited to gain remote code execution as SYSTEM.

Recommendations For SonicWall NetExtender versions 10.2.339 and earlier, update to a version later than 10.2.339 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-06025

CVE-2024-29014

Affected Products

Sonicwall Netextender

Sonicwall Sma100

References · 20

• https://bdu.fstec.ru/vul/2024-06025 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29014 · Security Note
• https://github.com/AmberWolfCyber/NachoVPN · Note
• https://twitter.com/seaarepea/status/1863284782433718302 · Twitter Post
• https://twitter.com/AmberWolfSec/status/1861364296980070805 · Twitter Post
• https://twitter.com/AmberWolfSec/status/1861364289795227740 · Twitter Post
• https://twitter.com/fletch_ai/status/1861651301182120008 · Twitter Post
• http://help.sonicwall.com/help/sw/eng/7634/8/0/0/content/Configuring_SSLVPN.24.12.htm · Note
• https://twitter.com/cyraxsecurity/status/1864127940599873943 · Twitter Post
• https://t.me/cvenotify/93959 · Telegram Post
• https://t.me/true_secator/6477 · Telegram Post
• https://vuldb.com/?id.271813 · Note
• https://t.me/cvedetector/1144 · Telegram Post