SonicWall NetExtender Pre-Logon Privilege Escalation Vulnerability

SonicWall NetExtender Pre-Logon Privilege Escalation Vulnerability

CVE-2023-44218 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.

Learn more about our User Device Pen Test.