UpHeron
All vulnerabilities

Servers and applications

CVE-2023-41715

SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.

Severity
High 8.8
Published
17 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.5.4.4-44v-21-2340, 6.5.4.13-105n, 7.0.1-5145
Sources
NVD

Affected software

SoftwareAffected versions
SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos
  • Every version before 7.0.1-5145
  • Every version before 6.5.4.4-44v-21-2340
  • Every version before 6.5.4.13-105n

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-41715
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-41715