SonicWall Connect Tunnel vulnerabilities

3 CVEs affecting SonicWall Connect Tunnel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-32817, published 2025-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32817, published 2025-04-16. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service…
CVE-2024-45316, published 2024-10-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges…
CVE-2024-45315, published 2024-10-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges…