CVE-2025-23010

SonicWall / NetExtender PUBLISHED

Description (CNA)

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Affected (CNA)

Vendor / product	Versions
SonicWall / NetExtender	affected 10.3.1 and earlier versions

CWE

CWE-59

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.