High · 7.2 CVE-2025-23010 EUVD-2025-10703GHSA-f5r8-5xjg-g5f9

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client whi…

Published Apr 10, 2025 · Updated Apr 17, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: NetExtender Category: Network devices

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	NetExtender	10.3.1 and earlier versions	—

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006 vendor-advisory