← CVE Intelligence

CVE-2024-45316

SonicWall / Connect Tunnel PUBLISHED

Description (CNA)

The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack.

Affected (CNA)

Vendor / productVersions
SonicWall / Connect Tunnelaffected 12.4.3.271 and earlier versions

CWE

CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.