Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

netspi.com | vulnerability | #windows | #lpe | #vpn | #sonicwall | #cve-2025-23009 | #cve-2025-23010 | #netextender

Summary

NetSPI found arbitrary SYSTEM file delete and overwrite flaws in SonicWall NetExtender for Windows (CVE-2025-23009, CVE-2025-23010) and chained them into local privilege escalation. Fixed in 10.3.2.
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
CVE-2019-10617 – AtherosSvc Registry LPE
NetSPI details CVE-2019-10617, a local privilege escalation in Qualcomm's AtherosSvc Windows service, where a ProgramData INI file lets unprivileged users perform arbitrary registry operations.
vulnerability · theori.io
Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System
Part three of the N-day exploit chain series, covering a Windows driver privilege-escalation flaw used to move from medium-integrity access to SYSTEM in a full exploit chain.
High · vulnerability · bishopfox.com
strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication
Bishop Fox exploited CVE-2026-25075, an integer underflow in strongSwan's EAP-TTLS plugin (4.5.0-6.0.4): crafted messages crash the IKE daemon via two-phase heap corruption; upgrade to 6.0.5+.
vulnerability · bishopfox.com
SonicWall-CVE-2024-53704: Exploit Details
Bishop Fox explains its CVE-2024-53704 exploit: unauthenticated attackers can hijack active SSL VPN sessions on unpatched SonicWall firewalls and open tunnels without the victim's password. Patch now.
vulnerability · bishopfox.com
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Exploit details for CVE-2024-53704: Bishop Fox walks through the reverse engineering behind the SSL VPN session-hijacking flaw in unpatched SonicWall devices and urges January 2025 patches.
vulnerability · bishopfox.com
It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable
Bishop Fox found 178,637 of 233,984 internet-exposed SonicWall NGFW devices (76%) vulnerable to CVE-2022-22274 and CVE-2023-0656, unauthenticated DoS issues sharing one root cause; upgrade urged.
back