Description
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | NetExtender | 10.2.336 and earlier versions | — |
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014 vendor-advisory