SonicWall Netextender vulnerabilities

15 CVEs affecting SonicWall Netextender, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-66153, published 2026-08-25.

More from SonicWall.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-4173, published 2015-08-26. Medium severity, CVSS 6.9. EPSS: 2.1% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before…
• CVE-2024-29014, published 2024-07-18. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.
• CVE-2020-5147, published 2021-01-09. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability…
• CVE-2022-22281, published 2022-05-13. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the…
• CVE-2026-66152, published 2026-08-25. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.
• CVE-2020-5131, published 2020-07-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system.…
• CVE-2025-23010, published 2025-04-10. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.
• CVE-2025-23009, published 2025-04-10. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file deletion.
• CVE-2025-23008, published 2025-04-10. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify configurations.
• CVE-2023-44220, published 2023-10-27. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a…

Latest

• CVE-2026-66153, published 2026-08-25. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.
• CVE-2025-23007, published 2025-01-30. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation.
• CVE-2023-6340, published 2024-01-18. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to…
• CVE-2023-44218, published 2023-10-03. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local…