SonicWall NetExtender Windows Local Privilege Escalation Vulnerability Allowing Arbitrary File Deletion

A local privilege escalation vulnerability has been identified in the SonicWall NetExtender Windows client, both 32-bit and 64-bit versions, prior to 10.3.1. This vulnerability allows an attacker to escalate privileges locally and trigger the deletion of arbitrary files.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of files, potentially causing data loss or disruption of services that rely on the deleted files.

Remediation

Users are advised to upgrade to SonicWall NetExtender Windows version 10.3.2 or higher to address this vulnerability.