CVE-2025-23008 - AskarLabs CVE Database

CVE-2025-23008

Vendor Sonicwall

Product NetExtender

Weakness CWE-250

Published April 10, 2025

Last update April 10, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify configurations.

Key dates

02Disclosure timeline

April 10, 2025 CVE published

April 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-23008 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/250.html

Related vulnerabilities

04Related CVE

CVE-2020-27826 CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability CVE-2024-11075 SICK Incoming Goods Suite privilege escalation vulnerability CVE-2025-0921 Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizViz CVE-2026-40638