Known vulnerabilities in NetExtender for Windows

Vendor: SonicWall
Software: NetExtender for Windows
Software CPE: cpe:2.3:a:sonicwall:netextender_for_windows:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NetExtender for Windows NetExtender for Windows is affected by 11 known vulnerabilities: 1 critical, 1 high, 9 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107329 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-23010		 CWE-59 Low
No
No
 10.3.2 10.04.2025 SB2025041006
#VU107328 - Execution with Unnecessary Privileges
CVE-2025-23009		 CWE-250 Low
No
No
 10.3.2 10.04.2025 SB2025041006
#VU107327 - Improper Privilege Management
CVE-2025-23008		 CWE-269 Low
No
No
 10.3.2 10.04.2025 SB2025041006
#VU103450 - Permissions, Privileges, and Access Controls
CVE-2025-23007		 CWE-264 Low
No
No
 10.3.1 30.01.2025 SB2025013020
#VU85417 - Stack-based buffer overflow
CVE-2023-6340		 CWE-121 Low
No
No
 10.2.337 16.01.2024 SB2024011607
#VU82436 - Uncontrolled Search Path Element
CVE-2023-44220		 CWE-427 Low
No
No
 10.2.337 26.10.2023 SB2023102607
#VU81298 - Improper Privilege Management
CVE-2023-44217		 CWE-269 Low
No
No
 10.2.337 30.09.2023 SB2023093012
#VU81297 - Improper Authentication
CVE-2023-44218		 CWE-287 High
No
No
 10.2.337 30.09.2023 SB2023093012
#VU62855 - Stack-based buffer overflow
CVE-2022-22281		 CWE-121 Low
No
No
 10.2.324 09.05.2022 SB2022050906
#VU49936 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-20016		 CWE-89 Critical
No
Exploited
 - 24.01.2021 SB2021012401
#VU49356 - Unquoted Search Path or Element
 CWE-428 Low
No
No
 10.2.302 09.01.2021 SB2021010901