CVE-2025-23010 - AskarLabs CVE Database

CVE-2025-23010

Vendor Sonicwall

Product NetExtender

Weakness CWE-59

Published April 10, 2025

Last update April 17, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

Key dates

02Disclosure timeline

April 10, 2025 CVE published

April 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-23010 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

04Related CVE

CVE-2025-11462 Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client CVE-2025-62364 text-generation-webui allows arbitrary file read via symbolic link upload CVE-2025-29795 Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability CVE-2026-41236 Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path CVE-2021-32551 apport read_file() function could follow maliciously constructed symbolic links