---
id: 7750
title: "CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/red-teaming/elevating-privileges-with-sonicwall-netextender/"
published_at: "2025-05-28T00:00:00Z"
tags: ["windows", "lpe", "vpn", "sonicwall", "cve-2025-23009", "cve-2025-23010", "netextender"]
phying_url: "https://phying.com/item/7750"
lang: en
---

# CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

## Summary

NetSPI found arbitrary SYSTEM file delete and overwrite flaws in SonicWall NetExtender for Windows (CVE-2025-23009, CVE-2025-23010) and chained them into local privilege escalation. Fixed in 10.3.2.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2025-05-28T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/red-teaming/elevating-privileges-with-sonicwall-netextender/
- **Phying News:** https://phying.com/item/7750