PT-2025-15912 · Sonicwall · Sonicwall Netextender Windows

CVE-2025-23008 · Published 2025-04-08 · Updated 2025-04-14

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender Windows (affected versions not specified)

Description: The issue is related to improper privilege management, allowing a low-privileged attacker to modify configurations in the SonicWall NetExtender Windows client.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-04592

CVE-2025-23008

Affected Products

Sonicwall Netextender Windows

References · 14

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23008 · Security Note
• https://bdu.fstec.ru/vul/2025-04592 · Security Note
• https://twitter.com/syedaquib77/status/1910684895044575303 · Twitter Post
• https://twitter.com/CCBalert/status/1911337481397502176 · Twitter Post
• https://twitter.com/autumn_good_35/status/1911741500754448719 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1910168609042899084 · Twitter Post
• https://t.me/cvedetector/22685 · Telegram Post
• https://twitter.com/dCypherIO/status/1911841886681399645 · Twitter Post
• https://twitter.com/cybercronai/status/1911022831669850453 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1910662003200229665 · Twitter Post
• https://t.me/cvetracker/21345 · Telegram Post
• https://twitter.com/cybercronai/status/1910735984414621954 · Twitter Post
• https://twitter.com/CVEnew/status/1910445209776709707 · Twitter Post