CVE-2023-44218 Privilege escalation in NetExtender

What is CVE-2023-44218?

CVE-2023-44218 is a high-severity vulnerability in SonicWall NetExtender, published on 3 Oct 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.

Weakness: CWE-267

Which versions are affected by CVE-2023-44218?

It affects 1 product.

Products include Sonicwall Netextender.

How do I fix CVE-2023-44218?

No fix has been published for CVE-2023-44218 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-44218 being exploited?

There is no known exploitation of CVE-2023-44218 in the wild and no public exploit code.

Other vulnerabilities in SonicWall NetExtender

• CVE-2023-44217 Privilege escalation in NetExtender High 7.8
• CVE-2022-22281 Memory corruption in SonicWall NetExtender Windows (32 and 64 bit) Client High 7.8
• CVE-2020-5131 Path traversal in SonicWall NetExtender High 7.8
• CVE-2023-44220 Other in NetExtender High 7.3
• CVE-2024-29014 Code injection in NetExtender High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rhwm-gx2m-c396.