SonicWall NetExtender Improper Privilege Management Vulnerability

A vulnerability allowing improper privilege management has been identified in the SonicWall NetExtender Windows client, both 32-bit and 64-bit versions. This vulnerability enables a low-privileged attacker to alter configurations within the application. The issue arises from inadequate management of user privileges, allowing unauthorized modifications to be made.

Impact

Exploitation of this vulnerability could lead to unauthorized configuration changes within the SonicWall NetExtender application, potentially allowing for further exploitation or misuse of the application.

Remediation

Users are advised to upgrade to SonicWall NetExtender Windows client version 10.3.2 or higher to address this vulnerability.