CVE-2025-23010

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Score

CVSS 3.1 7.2 High

Status

Deferred - PSIRT@sonicwall.com

Published

2025-04-10

Last modified

2025-04-17

Weaknesses

CWE-59

Affected products

• Netextender (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006