Vulnerabilities > Sonicwall > Netextender > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-01-18 CVE-2023-6340 Out-of-bounds Write vulnerability in Sonicwall Capture Client and Netextender
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver.
local
low complexity
sonicwall CWE-787
5.5
2021-01-09 CVE-2020-5147 Unquoted Search Path or Element vulnerability in Sonicwall Netextender
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system.
local
low complexity
sonicwall CWE-428
5.3