Local Privilege Escalation Vulnerability in SonicWall NetExtender
CVE-2025-23009

7.2HIGH

Key Information:

Vendor

Sonicwall
Status
Netextender
Vendor
CVE Published:
10 April 2025

What is CVE-2025-23009?

A local privilege escalation vulnerability within the SonicWall NetExtender Windows client could be exploited by an attacker to perform arbitrary file deletions. This can lead to unauthorized access or manipulation of the system, making it critical for users to mitigate risks by applying the latest patches and following best security practices.

Affected Version(s)

NetExtender Windows 10.3.1 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23009 : Local Privilege Escalation Vulnerability in SonicWall NetExtender