SonicWall NetExtender Windows Privilege Escalation Vulnerability via Unauthorized SYSTEM File Access

A vulnerability exists in the NetExtender Windows client log export function, allowing unauthorized access to sensitive Windows system files. This access could potentially lead to privilege escalation. The issue is present in NetExtender Windows version 10.3.0, affecting both 32-bit and 64-bit clients. Notably, NetExtender Windows 10.2.x versions and Linux-based NetExtender clients are not affected.

Impact

Exploitation of this vulnerability could result in local privilege escalation, allowing a user to gain elevated rights on the system.

Remediation

Users can upgrade to NetExtender Windows version 10.3.1 or higher to address this vulnerability.