CVE-2024-29014 - AskarLabs CVE Database

CVE-2024-29014

Vendor Sonicwall

Product NetExtender

Weakness CWE-94 · Code injection

Published July 18, 2024

Last update November 27, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

Key dates

02Disclosure timeline

July 18, 2024 CVE published

November 27, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-29014 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2022-2014 Code Injection in jgraph/drawio CVE-2026-46442 Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape CVE-2026-33881 Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor CVE-2026-0500 Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation) CVE-2023-43625