CVE-2025-23009

CVE-2025-23009

Vendor Sonicwall

Product NetExtender

Weakness CWE-250

Published April 10, 2025

Last update April 17, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file deletion.

Key dates

02Disclosure timeline

April 10, 2025 CVE published

April 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-23009 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/250.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE