CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-44218

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.0%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-44218

Sonicwall » Netextender » Version: N/A

cpe:2.3:a:sonicwall:netextender:-
Sonicwall » Netextender » Version: 10.2.300

cpe:2.3:a:sonicwall:netextender:10.2.300
Sonicwall » Netextender » Version: 10.2.322

cpe:2.3:a:sonicwall:netextender:10.2.322
Sonicwall » Netextender » Version: 10.2.336

cpe:2.3:a:sonicwall:netextender:10.2.336
Sonicwall » Netextender » Version: 7.5

cpe:2.3:a:sonicwall:netextender:7.5
Sonicwall » Netextender » Version: 7.5.226

cpe:2.3:a:sonicwall:netextender:7.5.226
Sonicwall » Netextender » Version: 7.5.227

cpe:2.3:a:sonicwall:netextender:7.5.227
Sonicwall » Netextender » Version: 8.0

cpe:2.3:a:sonicwall:netextender:8.0
Sonicwall » Netextender » Version: 8.0.236

cpe:2.3:a:sonicwall:netextender:8.0.236
Sonicwall » Netextender » Version: 8.0.238

cpe:2.3:a:sonicwall:netextender:8.0.238
Sonicwall » Netextender » Version: 9.0.815

cpe:2.3:a:sonicwall:netextender:9.0.815

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-44218

Products

Pricing

Contact Us