PT-2025-15914 · Sonicwall · Sonicwall Netextender Windows

Published

2025-04-08

·

Updated

2025-06-11

·

CVE-2025-23010

CVSS v3.1

7.2

High

VectorAV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender versions 10.3.1 and earlier
Description An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client allows an attacker to manipulate file paths. This vulnerability may allow an attacker to upload arbitrary files.
Recommendations For versions 10.3.1 and earlier, update to a version later than 10.3.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2025-04593
CVE-2025-23010

Affected Products

Sonicwall Netextender Windows