BaseFortify

Publication date: 2024-07-18

Last updated on: 2024-11-21

Assigner: SonicWALL, Inc.

Description

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2024-07-18

Last Modified

2024-11-21

Generated

2026-10-23

AI Q&A

2024-11-27

EPSS Evaluated

2026-10-20

NVD

CVE-2024-29014

Affected Vendors & Products

Vendor	Product	Version / Range
sonicwall	netextender	to 10.2.341 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability, identified as CVE-2024-29014, affects the SonicWall SMA100 NetExtender Windows client versions 10.2.339 and earlier. It allows an attacker to execute arbitrary code when the software processes an update for the EPC Client. This means that a malicious person could potentially take control of the affected system.

Impact Analysis

If you are using the affected version of the SonicWall NetExtender, this vulnerability could allow an attacker to run harmful code on your computer. This could lead to unauthorized access to your data, loss of sensitive information, or even control over your system.

Compliance Impact

This vulnerability could impact compliance with regulations like GDPR and HIPAA because it poses a risk to the security and confidentiality of personal and sensitive data. If an attacker exploits this vulnerability, it could lead to data breaches, which would violate these regulations and potentially result in legal consequences.

Hi! I’m here to help you understand CVE-2024-29014. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70