Skip to content
OpenAdvisories
High · 8.8 CVE-2023-41715 EUVD-2023-46207GHSA-5572-2439-pvwc

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privile…

Published Oct 17, 2023 · Updated Dec 16, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: SonicOS Category: Network devices

Description

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.

Affected products

VendorProductAffectedFixed
SonicWall SonicOS 7.0.1-5119 and earlier versions, 7.0.1-5129 and earlier versions, 6.5.4.4-44v-21-2079 and earlier versions, 6.5.4.12-101n and earlier versions —

Advisories 1

References