SonicWall Directory Services Connector vulnerabilities

2 CVEs affecting SonicWall Directory Services Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44219, published 2023-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5148, published 2021-03-05. High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days. SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the…
CVE-2023-44219, published 2023-10-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges…