CVE-2024-29014

—

CVSS 3.1

8.8 high

EPSS

2%p78

Published

Jul 18, 2024 (Jul 18, 2024)

Modified

Jun 17, 2026

Description

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

Vendors: sonicwall
Products: netextender
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news4 stories

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

The Hacker NewsDec 3, 10:17 UTC · Dec 3, 2024Exploit / PoC in the wildCVE-2024-5921 CVE-2024-29014

Week in review: Exploitable flaws in corporate VPN clients, malware loader created with gaming engine

Help Net SecurityDec 1, 00:00 UTC · Dec 1, 2024Malware CVE-2024-5921 CVE-2024-29014 CVE-2024-9680+1 CVEs

⚡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2024Vulnerability CVE-2024-41713 CVE-2024-51378 CVE-2023-45727+15 CVEs2

Researchers reveal exploitable flaws in corporate VPN clients

Help Net SecurityNov 26, 00:00 UTC · Nov 26, 2024Vulnerability CVE-2024-5921 CVE-2024-29014