CVE-2023-41715: SonicWall SonicOS

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.

Affected products

• SonicWall SonicOS: before 7.0.1-5145 (fixed in 7.0.1-5145); before 6.5.4.4-44v-21-2340 (fixed in 6.5.4.4-44v-21-2340); before 6.5.4.13-105n (fixed in 6.5.4.13-105n)

Published 2023-10-17. Last modified 2026-06-17.